Debian: enable PIE and BINDNOW hardening in build.

This commit is contained in:
Simon Kelley
2017-04-16 22:45:53 +01:00
parent f5a3679f1d
commit a24c31e023

2
debian/rules vendored
View File

@@ -11,7 +11,7 @@
package=dnsmasq-base package=dnsmasq-base
dpkg_buildflags := DEB_BUILD_MAINT_OPTIONS="hardening=+all" dpkg-buildflags dpkg_buildflags := DEB_BUILD_MAINT_OPTIONS="hardening=+all,+pie,+bindnow" dpkg-buildflags
CFLAGS = $(shell $(dpkg_buildflags) --get CFLAGS) CFLAGS = $(shell $(dpkg_buildflags) --get CFLAGS)
CFLAGS += $(shell $(dpkg_buildflags) --get CPPFLAGS) CFLAGS += $(shell $(dpkg_buildflags) --get CPPFLAGS)