This is an automated email from the git hooks/post-receive script.
wlfuetter-guest pushed a commit to branch master
in repository libmath-gsl-perl.
commit fdb799070a42c0a644d3e9ca5fd767b9aa784811
Author: Wolfgang Fütterer <deb...@wlf-online.de>
Date: Fri Nov 6 13:34:24 2015 +0100
Add hardening patch
---
debian/patches/0001-Hardening-Build-Patch.patch | 22 ++++++++++++++++++++++
debian/patches/series | 1 +
2 files changed, 23 insertions(+)
diff --git a/debian/patches/0001-Hardening-Build-Patch.patch
b/debian/patches/0001-Hardening-Build-Patch.patch
new file mode 100644
index 0000000..16cd9f3
--- /dev/null
+++ b/debian/patches/0001-Hardening-Build-Patch.patch
@@ -0,0 +1,22 @@
+From: =?utf-8?q?Wolfgang_F=C3=BCtterer?= <deb...@wlf-online.de>
+Date: Fri, 6 Nov 2015 09:09:46 +0100
+Subject: Hardening Build Patch
+
+---
+ Build.PL | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/Build.PL b/Build.PL
+index e6075d2..625bd8b 100644
+--- a/Build.PL
++++ b/Build.PL
+@@ -46,6 +46,9 @@ $swig_flags = ' -I/usr/include' if $ccflags =~ /^\s*$/;
+
+ $ccflags .= " $Config{ccflags}"; # we need this for some Linuxes
+
++$ccflags .= " -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -D_FORTIFY_SOURCE=2"; #Needed for hardening on debian
++$ldflags .= " -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -Wl,-z,relro"; #Needed for hardening on debian
++
+ ## Swig produces a number of GCC warnings. Turn them off if we can.
+ $ccflags .= try_cflags("-Wall");
+ #$ccflags .= try_cflags("-Wno-strict-aliasing");
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..d2e4206
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+0001-Hardening-Build-Patch.patch
--
Alioth's /usr/local/bin/git-commit-notice on
/srv/git.debian.org/git/pkg-perl/packages/libmath-gsl-perl.git
_______________________________________________
Pkg-perl-cvs-commits mailing list
Pkg-perl-cvs-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
