[PATCH] debian: Add hardening options

Keng-Yu Lin kengyu at canonical.com
Tue Jul 24 10:27:25 UTC 2012


Several compile-time options to help against memory corruption attacks, or
provide additional warning messages during compiles.

Please see http://wiki.debian.org/Hardening for defail.

Signed-off-by: Keng-Yu Lin <kengyu at canonical.com>
---
 debian/control |    2 +-
 debian/rules   |    2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index cd7e199..1f93c6a 100644
--- a/debian/control
+++ b/debian/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: Firmware Testing Team <firmware-testing-team at lists.launchpad.net>
 Uploaders: Colin King <colin.king at ubuntu.com>, Keng-Yu Lin <kengyu at ubuntu.com>, Alex Hung <alex.hung at canonical.com>, Chris Van Hoof <vanhoof at canonical.com>, Ivan Hu <ivan.hu at canonical.com>
 Standards-Version: 3.9.3
-Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison
+Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison, hardening-wrapper
 
 Package: fwts
 Architecture: any
diff --git a/debian/rules b/debian/rules
index 0f317e6..4af7a4f 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,7 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_HARDENING=1
+
 override_dh_auto_configure:
 	autoreconf -ivf
 	dh_auto_configure
-- 
1.7.9.5




More information about the ubuntu-devel mailing list