diff options
| author |  Benjamin Barenblat <bbaren@mit.edu> | 2016-05-30 17:35:28 -0400 |
|---|---|---|
| committer | Benjamin Barenblat <bbaren@mit.edu> | 2016-05-30 17:35:28 -0400 |
| commit | 74e6e6c7cf98dc74ea99ff6715a50ca8d63c7473 (patch) | |
| tree | b01144230eba475173318df0493d2232d89d8794 | |
| parent | b3f024c61af1eb69b6fd2065b1df7b6e20056e62 (diff) | |
Harden urweb executable further
| -rwxr-xr-x | debian/rules | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/debian/rules b/debian/rules index 4fa71ed5..5fe61339 100755 --- a/debian/rules +++ b/debian/rules @@ -7,7 +7,10 @@ DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH) # Avoid overlinking and reduce library dependencies. export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed -# Harden SML executables. +# Harden SML executables. Do not build position-independent executables, +# though; urweb depends on the MLton runtime, which is not built position- +# independent in Debian. +export DEB_BUILD_MAINT_OPTIONS := hardening=+all,-pie export MLTONARGS := \ -cc-opt "$(shell dpkg-buildflags --get CPPFLAGS) \ $(shell dpkg-buildflags --get CFLAGS)" \ |