summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Benjamin Barenblat <bbaren@mit.edu>2016-05-30 17:35:28 -0400
committerGravatar Benjamin Barenblat <bbaren@mit.edu>2016-05-30 17:35:28 -0400
commit74e6e6c7cf98dc74ea99ff6715a50ca8d63c7473 (patch)
treeb01144230eba475173318df0493d2232d89d8794
parentb3f024c61af1eb69b6fd2065b1df7b6e20056e62 (diff)
Harden urweb executable further
-rwxr-xr-xdebian/rules5
1 files changed, 4 insertions, 1 deletions
diff --git a/debian/rules b/debian/rules
index 4fa71ed5..5fe61339 100755
--- a/debian/rules
+++ b/debian/rules
@@ -7,7 +7,10 @@ DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
# Avoid overlinking and reduce library dependencies.
export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
-# Harden SML executables.
+# Harden SML executables. Do not build position-independent executables,
+# though; urweb depends on the MLton runtime, which is not built position-
+# independent in Debian.
+export DEB_BUILD_MAINT_OPTIONS := hardening=+all,-pie
export MLTONARGS := \
-cc-opt "$(shell dpkg-buildflags --get CPPFLAGS) \
$(shell dpkg-buildflags --get CFLAGS)" \