Skip to content

Commit

Permalink
Debian hardening
Browse files Browse the repository at this point in the history
* Fortify functions added via CPPFLAGS
* Read-only relocation added via LDFLAGS
  • Loading branch information
bahamat committed Oct 20, 2013
1 parent 1b575b0 commit a2b79ae
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion debian/rules
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,8 @@ override_dh_auto_configure:
--mandir=\$${prefix}/share/man \
--infodir=\$${prefix}/share/info \
--htmldir=\$${prefix}/share/doc/cfengine3/html \
CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs"
CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs,-z,relro" \
CPPFLAGS=-D_FORTIFY_SOURCE=2

override_dh_clean:
dh_autoreconf_clean
Expand Down

0 comments on commit a2b79ae

Please sign in to comment.