Source: libgfshare
Version: 2.0.0-2
Severity: wishlist
Tags: patch
Hi,
gfshare package ships binaries that lack the "bindnow" linker flag
which makes the Global Offset Table fully read-only.
The bindnow feature trades startup time for improved security which
seems sensible for libgfshare.
Patch attached.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
diff --git a/debian/rules b/debian/rules
index c037ef8..77ac39f 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,9 @@
#!/usr/bin/make -f
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+DPKG_EXPORT_BUILDFLAGS = 1
+
include /usr/share/dpkg/default.mk
ifneq ($(SOURCE_DATE_EPOCH),)
