From 63880370c4ada1a8b824903684a0dd7299a68aeb Mon Sep 17 00:00:00 2001 From: Andre Noll Date: Wed, 24 Apr 2024 04:31:22 +0200 Subject: [PATCH] debian: use fortified libc. dpkg-buildflags() emits a number of var=val pairs, which specifically set LDFLAGS. By turning on hardening, the value includes -z,now to tell the linker to resolve all symbols at startup time, which is a prerequisite for a read-only global offset table. Suggested-by: lintian(1) --- debian/rules | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/rules b/debian/rules index 387b14c..ddb503d 100755 --- a/debian/rules +++ b/debian/rules @@ -24,7 +24,8 @@ TRIPLET := $(shell dpkg-architecture -qDEB_HOST_MULTIARCH) build-arch: $(checkdir) - $(MAKE) + $(MAKE) $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all \ + dpkg-buildflags --export=cmdline) build-indep: build: build-indep build-arch -- 2.39.5