From: E.Smith <31170571+azlm8t@users.noreply.github.com>
Date: Mon, 1 Oct 2018 23:44:16 +0000 (+0100)
Subject: build: Enable hardening options for Debian build.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=406a781184f74af75637329f58253f28482b7c61;p=thirdparty%2Ftvheadend.git

build: Enable hardening options for Debian build.

The Debian guidelines recommend enable hardening for processes
that handle untrusted data such as network listeners.

This sets various compiler flags for stack smashing and
makes some segments read-only.
https://wiki.debian.org/Hardening
---

diff --git a/debian/rules b/debian/rules
index 1208aafc3..883e095a2 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 export DH_VERBOSE=1
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
 %:
 	dh $@ --with-systemd