From 2a08dbb83236b59b65fac6a184ffec5ecd03f4e7 Mon Sep 17 00:00:00 2001 From: Yves-Alexis Perez Date: Fri, 26 Apr 2013 23:02:52 +0200 Subject: Update build flags - build using all hardening flags. - use -Wl,--as-needed -Wl,-O1 for LDFLAGS. --- debian/changelog | 2 ++ debian/rules | 3 ++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index ecc6a7292..e7ce5db38 100644 --- a/debian/changelog +++ b/debian/changelog @@ -16,6 +16,8 @@ strongswan (5.0.3-1) UNRELEASED; urgency=low - remove pluto handling since it's gone - don't special-case XAuth on kFreeBSD anymore. - add --enable-attr-sql. + - build using all hardening flags. + - use -Wl,--as-needed -Wl,-O1 for LDFLAGS. * debian/control: - drop strongswan-ikev1 package - rename strongswan-ikev2 package to strongswan-ike for now and makes it diff --git a/debian/rules b/debian/rules index 0ee6bbbfa..0ad2f5b86 100755 --- a/debian/rules +++ b/debian/rules @@ -1,6 +1,7 @@ #!/usr/bin/make -f +export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed -Wl,-O1 #export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed -Wl,-O1 -Wl,-z,defs -export DEB_BUILD_MAINT_OPTIONS=hardening=+pie,+bindnow +export DEB_BUILD_MAINT_OPTIONS=hardening=+all CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \ --enable-ldap --enable-curl \ -- cgit v1.2.3