diff options
| author | Yves-Alexis Perez <corsac@corsac.net> | 2012-06-28 22:14:35 +0200 |
|---|---|---|
| committer | Yves-Alexis Perez <corsac@corsac.net> | 2012-06-28 22:14:35 +0200 |
| commit | d6e503c1ea60e1836315169e14dee2a82879e78d (patch) | |
| tree | d45cc8a37c3cbbf79f3f48ba9c175df792fbf554 /debian/rules | |
| parent | 211f04ef0e1a69f9ba21d52ed1d8e0b87bc68494 (diff) | |
| download | vyos-strongswan-d6e503c1ea60e1836315169e14dee2a82879e78d.tar.gz vyos-strongswan-d6e503c1ea60e1836315169e14dee2a82879e78d.zip | |
Hardening support
* debian/rules:
- enable hardening flags with PIE and bindnow.
Diffstat (limited to 'debian/rules')
| -rwxr-xr-x | debian/rules | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/debian/rules b/debian/rules index 72e28e0f8..b8dfb16f6 100755 --- a/debian/rules +++ b/debian/rules @@ -7,8 +7,8 @@ export DH_OPTIONS -# this is a security-critical package, set all the options we can -export DEB_BUILD_HARDENING=1 +#export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed -Wl,-O1 -Wl,-z,defs +export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow CONFIGUREARGS := --prefix=/usr --sysconfdir=/etc --localstatedir=/var \ --libexecdir=/usr/lib \ |