Add some hardening to the debian build

diff --git a/debian/rules b/debian/rules
index ac938c68c0b31aad3a7eca689c0c272d63310afb..be396c666cfe24677ce7186398f316e5a0fa2807 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -7,10 +7,10 @@ export VERBOSE=1
 
 FS_CC?=gcc
 FS_CXX?=g++
-FS_CPPFLAGS?=
-FS_CFLAGS?=-g3 -O2 -fPIC
+FS_CPPFLAGS?=-D_FORTIFY_SOURCE=2
+FS_CFLAGS?=-g3 -O2 -fPIC -fstack-protector --param=ssp-buffer-size=4
 FS_CXXFLAGS?=$(FS_CFLAGS)
-FS_LDFLAGS?=
+FS_LDFLAGS?=-Wl,-z,relro
 export PATH?=/usr/lib/ccache:/usr/sbin:/usr/bin:/sbin:/bin
 export CC:=$(FS_CC)
 export CXX:=$(FS_CXX)