[cpp-sp] 02/06: Add PIE to the hardening flags for the shibd binary

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to annotated tag debian/2.4.3+dfsg-5
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=1c681e9d756d002d8d55677f3ee53e10f71e6197

commit 1c681e9d756d002d8d55677f3ee53e10f71e6197
Author: Russ Allbery <rra at debian.org>
AuthorDate: Thu Feb 2 16:32:06 2012 -0800

    Add PIE to the hardening flags for the shibd binary
---
 debian/changelog | 6 ++++++
 debian/rules     | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 9dfb066..19668d4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+shibboleth-sp2 (2.4.3+dfsg-5) UNRELEASED; urgency=low
+
+  * Add PIE to the hardening flags for the shibd binary.
+
+ -- Russ Allbery <rra at debian.org>  Thu, 02 Feb 2012 16:32:00 -0800
+
 shibboleth-sp2 (2.4.3+dfsg-4) unstable; urgency=low
 
   * Update to debhelper compatibility level V9.
diff --git a/debian/rules b/debian/rules
index 49a050b..792e185 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 
 # Enable compiler hardening flags.
-export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow
+export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow,+pie
 
 # Add --as-needed to drop a few unnecessary dependencies.
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.