This is an automated email from the git hooks/post-receive script. sebastic pushed a commit to branch wheezy-backports in repository mapcache.
commit 4e49f81ed4480a79b56239c2421e6d7827f6c762 Author: Bas Couwenberg <sebas...@xs4all.nl> Date: Fri Jun 21 17:48:00 2013 +0200 Enable hardening build flags. --- debian/changelog | 1 + debian/control | 2 +- debian/patches/libmapcache_hardening.patch | 11 +++++++++++ debian/patches/series | 1 + debian/rules | 17 ++++++++++++++++- 5 files changed, 30 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index 490fb25..5621c3d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -13,6 +13,7 @@ mapcache (1.0.0-3) UNRELEASED; urgency=low * Create /var/cache/mapcache in postinst. * Build-Depend on libproj-dev instead of the proj source package. * Drop explicit dependency on libmapcache0, already set by shlibs:Depends. + * Enable hardening build flags. * Add patch to fix typos in demo service javascript. * Add patch to use a valid variable name for the WMSGetFeatureInfo control. * Add patch to set the HTML5 DOCTYPE in the demo service. diff --git a/debian/control b/debian/control index 58799c7..b253243 100644 --- a/debian/control +++ b/debian/control @@ -3,7 +3,7 @@ Section: devel Priority: extra Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org> Uploaders: Francesco Paolo Lovergine <fran...@debian.org>, Alan Boudreault <aboudrea...@mapgears.com>, Bas Couwenberg <sebas...@xs4all.nl> -Build-Depends: debhelper (>= 9), autotools-dev, +Build-Depends: debhelper (>= 9), dpkg-dev (>= 1.16.1.1), autotools-dev, apache2-prefork-dev, libpng-dev, libjpeg-dev, libcurl4-gnutls-dev, libpcre3-dev, libpixman-1-dev, libfcgi-dev, libgdal1-dev, libgeos-dev, libsqlite3-dev, libtiff4-dev, libmapserver, libmapserver-dev, diff --git a/debian/patches/libmapcache_hardening.patch b/debian/patches/libmapcache_hardening.patch new file mode 100644 index 0000000..805d6f7 --- /dev/null +++ b/debian/patches/libmapcache_hardening.patch @@ -0,0 +1,11 @@ +--- a/lib/Makefile.in ++++ b/lib/Makefile.in +@@ -17,7 +17,7 @@ source_mapserver.lo: source_mapserver.c + + + libmapcache.la: $(LOBJS) +- $(LIBTOOL) --mode=link --tag CC $(CC) -rpath $(libdir) $(LOBJS) $(LIBS) -o $@ ++ $(LIBTOOL) --mode=link --tag CC $(CC) -rpath $(libdir) $(LOBJS) $(LIBS) $(LDFLAGS) -o $@ + + clean: + rm -f *.o diff --git a/debian/patches/series b/debian/patches/series index d60ce6c..a5aeb20 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -1,5 +1,6 @@ includepath.patch fixwithmapserv.patch +libmapcache_hardening.patch demo_service_js_typos.patch demo_service_valid_js_var.patch demo_service_html5_doctype.patch diff --git a/debian/rules b/debian/rules index 5c55ab3..b417a6b 100755 --- a/debian/rules +++ b/debian/rules @@ -16,6 +16,21 @@ # This has to be exported to make some magic below work. export DH_OPTIONS +# Enable hardening build flags +export DEB_BUILD_MAINT_OPTIONS=hardening=+all + +CPPFLAGS:=$(shell dpkg-buildflags --get CPPFLAGS) +CFLAGS:=$(shell dpkg-buildflags --get CFLAGS) +CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS) +FFLAGS:=$(shell dpkg-buildflags --get FFLAGS) +LDFLAGS:=$(shell dpkg-buildflags --get LDFLAGS) + +CFLAGS+=$(CPPFLAGS) +CFLAGS+=$(FFLAGS) +CFLAGS+=$(LDFLAGS) + +CPPFLAGS=$(CFLAGS) +CXXFLAGS=$(CFLAGS) %: dh $@ @@ -26,7 +41,7 @@ override_dh_clean: -$(RM) Makefile.inc apache/Makefile cgi/Makefile lib/Makefile util/Makefile override_dh_auto_configure: - dh_auto_configure -- --with-mapserver=/usr/bin --with-fastcgi + dh_auto_configure -- --with-mapserver=/usr/bin --with-fastcgi CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" CPPFLAGS="$(CPPFLAGS)" override_dh_auto_build: dh_auto_build -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/mapcache.git _______________________________________________ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-grass-devel