Enable all hardening build options
Especially this enables the hardening build flag, so the tack binary is
different. So there are no file conflicts between tack-dbgsym and old
tack-dbg packages anymore, and the dh_strip override can be dropped.
Sven Joachim
6 years ago
| 8 | 8 |
* Drop dpkg-dev Build-Depends, even oldoldstable has the required version.
|
| 9 | 9 |
* Remove version constraint in libncurses5-dev build-dependency.
|
| 10 | 10 |
* Set Rules-Requires-Root to no.
|
|
11 |
* Enable all hardening build options.
|
| 11 | 12 |
|
| 12 | 13 |
-- Sven Joachim <svenjoac@gmx.de> Sat, 13 Jan 2018 11:20:55 +0100
|
| 13 | 14 |
|
| 0 | 0 |
#!/usr/bin/make -f
|
|
1 |
|
|
2 |
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
|
| 1 | 3 |
|
| 2 | 4 |
# Make sure we aren't missing any symbols
|
| 3 | 5 |
export DEB_LDFLAGS_MAINT_APPEND = -Wl,-z,defs
|
|
| 13 | 15 |
|
| 14 | 16 |
override_dh_installchangelogs:
|
| 15 | 17 |
dh_installchangelogs -k
|
| 16 | |
|
| 17 | |
override_dh_strip:
|
| 18 | |
dh_strip --dbgsym-migration='tack-dbg (<< 1.08-1~)'
|