summaryrefslogtreecommitdiff
path: root/debian/patches/500-buildflags.patch
diff options
context:
space:
mode:
authorJörg Frings-Fürst <debian@jff-webhosting.net>2015-01-07 15:57:35 +0100
committerJörg Frings-Fürst <debian@jff-webhosting.net>2015-01-07 15:57:35 +0100
commit894a9c79465bab71443b574776da307cddd6a656 (patch)
tree941bafd366cb98868adea879da4dab10570d7580 /debian/patches/500-buildflags.patch
parent748da1b2182cf8785bd5b6ddb595eb35db7e2a2c (diff)
Add buildflags into Makefiles, remove useless tags
Diffstat (limited to 'debian/patches/500-buildflags.patch')
-rw-r--r--debian/patches/500-buildflags.patch22
1 files changed, 22 insertions, 0 deletions
diff --git a/debian/patches/500-buildflags.patch b/debian/patches/500-buildflags.patch
new file mode 100644
index 0000000..fa493ab
--- /dev/null
+++ b/debian/patches/500-buildflags.patch
@@ -0,0 +1,22 @@
+Description: Poke requested Debian buildflags for hardening into Makefile
+Author: Jörg Frings-Fürst <debian@jff-webhosting.net>
+Last-Update: 2015-01-07
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+Index: trunk/Makefile
+===================================================================
+--- trunk.orig/Makefile
++++ trunk/Makefile
+@@ -394,10 +394,11 @@ VALA_CFLAGS := `pkg-config --cflags $(EX
+ $(foreach def,$(DEFINES),-D$(def))
+
+ VALA_LDFLAGS := `pkg-config --libs $(EXT_PKGS) $(DIRECT_LIBS) gthread-2.0`
++VALA_LDFLAGS += -fPIE -pie -Wl,-z,relro -Wl,-z,now
+
+ # REQUIRED_CFLAGS absolutely get appended to CFLAGS, whatever the
+ # the value of CFLAGS in the environment
+-REQUIRED_CFLAGS := -fPIC
++REQUIRED_CFLAGS := -fPIC -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2
+
+ # setting CFLAGS in configure.mk overrides build type
+ ifndef CFLAGS