Debian: enable PIE and BINDNOW hardening in build.

a24c31e0 · Simon Kelley · f5a3679f · a24c31e0
Commit a24c31e0 authored Apr 16, 2017 by Simon Kelley
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

debian/rules debian/rules +1 -1

No files found.
--- a/debian/rules
+++ b/debian/rules
@@ -11,7 +11,7 @@

 package=dnsmasq-base

-dpkg_buildflags := DEB_BUILD_MAINT_OPTIONS="hardening=+all" dpkg-buildflags
+dpkg_buildflags := DEB_BUILD_MAINT_OPTIONS="hardening=+all,+pie,+bindnow" dpkg-buildflags

 CFLAGS = $(shell $(dpkg_buildflags) --get CFLAGS)
 CFLAGS += $(shell $(dpkg_buildflags) --get CPPFLAGS)