[PATCH] debian: Add hardening options

Keng-Yu Lin kengyu at canonical.com
Tue Jul 24 10:30:12 UTC 2012


It is my bad. I mean to send this to fwts-devel. Please ignore this mail.

On Tue, Jul 24, 2012 at 6:27 PM, Keng-Yu Lin <kengyu at canonical.com> wrote:
> Several compile-time options to help against memory corruption attacks, or
> provide additional warning messages during compiles.
>
> Please see http://wiki.debian.org/Hardening for defail.
>
> Signed-off-by: Keng-Yu Lin <kengyu at canonical.com>
> ---
>  debian/control |    2 +-
>  debian/rules   |    2 ++
>  2 files changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/debian/control b/debian/control
> index cd7e199..1f93c6a 100644
> --- a/debian/control
> +++ b/debian/control
> @@ -4,7 +4,7 @@ Priority: optional
>  Maintainer: Firmware Testing Team <firmware-testing-team at lists.launchpad.net>
>  Uploaders: Colin King <colin.king at ubuntu.com>, Keng-Yu Lin <kengyu at ubuntu.com>, Alex Hung <alex.hung at canonical.com>, Chris Van Hoof <vanhoof at canonical.com>, Ivan Hu <ivan.hu at canonical.com>
>  Standards-Version: 3.9.3
> -Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison
> +Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison, hardening-wrapper
>
>  Package: fwts
>  Architecture: any
> diff --git a/debian/rules b/debian/rules
> index 0f317e6..4af7a4f 100755
> --- a/debian/rules
> +++ b/debian/rules
> @@ -1,5 +1,7 @@
>  #!/usr/bin/make -f
>
> +export DEB_BUILD_HARDENING=1
> +
>  override_dh_auto_configure:
>         autoreconf -ivf
>         dh_auto_configure
> --
> 1.7.9.5
>



More information about the ubuntu-devel mailing list