debian/notmuch
1
0
Fork 0
mirror of https://git.notmuchmail.org/git/notmuch synced 2024-11-22 02:48:08 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

debian: enable build hardening features

Browse source 
Debian's build hardening toolchain options produce binary artifacts
that are more resistant to compromise.  The most visible change for
notmuch today is likely to be the addition of the "bindnow" linker
flag, which contributes to making the "Global Offset Table" fully
read-only.

See https://wiki.debian.org/Hardening for more details.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
This commit is contained in:
Daniel Kahn Gillmor 2019-06-10 04:35:03 +03:00 committed by David Bremner
parent 00c63bf736
commit cd733b079f
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
debian/rules vendored
View file

@ -2,6 +2,8 @@
python3_all = py3versions -s | xargs -n1 | xargs -t -I {} env {} python3_all = py3versions -s | xargs -n1 | xargs -t -I {} env {}
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
%: %:
dh $@ --with python2,python3,elpa dh $@ --with python2,python3,elpa