diff options
| author | Jörg Frings-Fürst <debian@jff-webhosting.net> | 2015-12-13 18:04:45 +0100 |
|---|---|---|
| committer | Jörg Frings-Fürst <debian@jff-webhosting.net> | 2015-12-13 18:04:45 +0100 |
| commit | 4bab2e5816700a94e967dec612a15eed3bcc13eb (patch) | |
| tree | 16af96cffced1257c0d9045b22af8a3316005ed7 /debian/patches/500-buildflags.patch | |
| parent | c3164342455a7c7085a1a59b5910e936241730c8 (diff) | |
CVE TEMP-0807110-881366
Diffstat (limited to 'debian/patches/500-buildflags.patch')
| -rw-r--r-- | debian/patches/500-buildflags.patch | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/debian/patches/500-buildflags.patch b/debian/patches/500-buildflags.patch deleted file mode 100644 index a8030ec..0000000 --- a/debian/patches/500-buildflags.patch +++ /dev/null @@ -1,33 +0,0 @@ -Description: Poke requested Debian buildflags for hardening into Makefile -Author: Jörg Frings-Fürst <debian@jff-webhosting.net> -Last-Update: 2015-01-07 ---- -This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ -Index: trunk/Makefile -=================================================================== ---- trunk.orig/Makefile -+++ trunk/Makefile -@@ -395,10 +395,11 @@ VALA_CFLAGS := `pkg-config --cflags $(EX - $(foreach def,$(DEFINES),-D$(def)) - - VALA_LDFLAGS := `pkg-config --libs $(EXT_PKGS) $(DIRECT_LIBS) gthread-2.0` -+VALA_LDFLAGS += -fPIE -pie -Wl,-z,relro -Wl,-z,now - - # REQUIRED_CFLAGS absolutely get appended to CFLAGS, whatever the - # the value of CFLAGS in the environment --REQUIRED_CFLAGS := -fPIC -+REQUIRED_CFLAGS := -g -O2 -fPIE -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 - - # setting CFLAGS in configure.mk overrides build type - ifndef CFLAGS -@@ -411,8 +412,8 @@ PLUGIN_CFLAGS = -O2 -g -pipe - endif - endif - --CFLAGS += $(PROFILE_FLAGS) $(REQUIRED_CFLAGS) --PLUGIN_CFLAGS += $(PROFILE_FLAGS) $(REQUIRED_CFLAGS) -+CFLAGS += $(PROFILE_FLAGS) $(REQUIRED_CFLAGS) -fstack-protector-strong -+PLUGIN_CFLAGS += $(PROFILE_FLAGS) $(REQUIRED_CFLAGS) -fPIC -fno-stack-protector - - # Required for gudev-1.0 - CFLAGS += -DG_UDEV_API_IS_SUBJECT_TO_CHANGE |