From: Andre Noll <maan@tuebingen.mpg.de>
Date: Wed, 24 Apr 2024 02:31:22 +0000 (+0200)
Subject: debian: use fortified libc.
X-Git-Tag: v1.0.5~2
X-Git-Url: http://git.tue.mpg.de/?a=commitdiff_plain;h=63880370c4ada1a8b824903684a0dd7299a68aeb;p=lopsub.git

debian: use fortified libc.

dpkg-buildflags() emits a number of var=val pairs, which specifically
set LDFLAGS. By turning on hardening, the value includes -z,now to
tell the linker to resolve all symbols at startup time, which is a
prerequisite for a read-only global offset table.

Suggested-by: lintian(1)
---

diff --git a/debian/rules b/debian/rules
index 387b14c..ddb503d 100755
--- a/debian/rules
+++ b/debian/rules
@@ -24,7 +24,8 @@ TRIPLET := $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
 
 build-arch:
 	$(checkdir)
-	$(MAKE)
+	$(MAKE) $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all \
+		dpkg-buildflags --export=cmdline)
 build-indep:
 build: build-indep build-arch