control: tags -1 patch,security
From 753f695a3b51a712fea42b554c719fe16da3b11d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <Christian Göttsche cgzo...@googlemail.com> Date: Sun, 6 Nov 2022 16:39:50 +0100 Subject: [PATCH] d/rules: enable hardening
In particular the BINDNOW linker flag is currently missing. --- debian/changelog | 7 +++++++ debian/rules | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 05ccd20..3c29a4c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +bash (5.2-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Enable all hardening flags. Closes: #1021082. + + -- Christian Göttsche <cgzo...@googlemail.com> Sun, 06 Nov 2022 17:01:23 +0100 + bash (5.2-2) unstable; urgency=medium * Apply upstream patches 001 - 002. diff --git a/debian/rules b/debian/rules index fb9b6bc..bb397ed 100755 --- a/debian/rules +++ b/debian/rules @@ -41,7 +41,7 @@ else endif -dpkg_buildflags = DEB_CFLAGS_MAINT_APPEND="-Wall" dpkg-buildflags +dpkg_buildflags = DEB_BUILD_MAINT_OPTIONS="hardening=+all" DEB_CFLAGS_MAINT_APPEND="-Wall" dpkg-buildflags CFLAGS := $(shell $(dpkg_buildflags) --get CFLAGS) CPPFLAGS := $(shell $(dpkg_buildflags) --get CPPFLAGS) LDFLAGS := $(shell $(dpkg_buildflags) --get LDFLAGS) -- 2.38.1
