summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/changelog1
-rwxr-xr-xdebian/rules3
2 files changed, 3 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog
index 10609ec8..cb5c6b8f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -14,6 +14,7 @@ pam (1.4.0-1) UNRELEASED; urgency=medium
* debian/pam-configs/unix: use nullok, not nullok_secure.
* Drop pam_tally and pam_tally2 modules, which have been deprecated
upstream in favor of pam_faillock. Closes: #569746, LP: #772121.
+ * Add hardening+=bindnow to build options, per lintian.
-- Steve Langasek <vorlon@debian.org> Tue, 11 Aug 2020 14:58:13 -0700
diff --git a/debian/rules b/debian/rules
index 3b5e24ef..f8ad3c18 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,7 +2,8 @@
DEB_LDFLAGS_MAINT_APPEND := -Wl,-z,defs
DEB_CFLAGS_MAINT_APPEND := $(shell getconf LFS_CFLAGS)
-export DEB_LDFLAGS_MAINT_APPEND DEB_CFLAGS_MAINT_APPEND
+DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow
+export DEB_LDFLAGS_MAINT_APPEND DEB_CFLAGS_MAINT_APPEND DEB_BUILD_MAINT_OPTIONS
ifeq ($(shell dpkg-architecture -qDEB_BUILD_ARCH_OS),hurd)
DEB_LDFLAGS_MAINT_APPEND += -lpthread
endif