From dfd785460062dc0ed8b70920ff269e6060f76b11 Mon Sep 17 00:00:00 2001 From: Steve Langasek Date: Wed, 12 Aug 2020 18:53:20 +0000 Subject: Add hardening+=bindnow to build options, per lintian. --- debian/changelog | 1 + debian/rules | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 10609ec8..cb5c6b8f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -14,6 +14,7 @@ pam (1.4.0-1) UNRELEASED; urgency=medium * debian/pam-configs/unix: use nullok, not nullok_secure. * Drop pam_tally and pam_tally2 modules, which have been deprecated upstream in favor of pam_faillock. Closes: #569746, LP: #772121. + * Add hardening+=bindnow to build options, per lintian. -- Steve Langasek Tue, 11 Aug 2020 14:58:13 -0700 diff --git a/debian/rules b/debian/rules index 3b5e24ef..f8ad3c18 100755 --- a/debian/rules +++ b/debian/rules @@ -2,7 +2,8 @@ DEB_LDFLAGS_MAINT_APPEND := -Wl,-z,defs DEB_CFLAGS_MAINT_APPEND := $(shell getconf LFS_CFLAGS) -export DEB_LDFLAGS_MAINT_APPEND DEB_CFLAGS_MAINT_APPEND +DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow +export DEB_LDFLAGS_MAINT_APPEND DEB_CFLAGS_MAINT_APPEND DEB_BUILD_MAINT_OPTIONS ifeq ($(shell dpkg-architecture -qDEB_BUILD_ARCH_OS),hurd) DEB_LDFLAGS_MAINT_APPEND += -lpthread endif -- cgit v1.2.3