summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/changelog2
-rwxr-xr-xdebian/rules3
2 files changed, 4 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog
index ecc6a7292..e7ce5db38 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,6 +16,8 @@ strongswan (5.0.3-1) UNRELEASED; urgency=low
- remove pluto handling since it's gone
- don't special-case XAuth on kFreeBSD anymore.
- add --enable-attr-sql.
+ - build using all hardening flags.
+ - use -Wl,--as-needed -Wl,-O1 for LDFLAGS.
* debian/control:
- drop strongswan-ikev1 package
- rename strongswan-ikev2 package to strongswan-ike for now and makes it
diff --git a/debian/rules b/debian/rules
index 0ee6bbbfa..0ad2f5b86 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,6 +1,7 @@
#!/usr/bin/make -f
+export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed -Wl,-O1
#export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed -Wl,-O1 -Wl,-z,defs
-export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \
--enable-ldap --enable-curl \