debian: Apply hardening options to build.
authorBen Pfaff <blp@nicira.com>
Mon, 12 Aug 2013 22:10:39 +0000 (15:10 -0700)
committerBen Pfaff <blp@nicira.com>
Tue, 13 Aug 2013 16:31:33 +0000 (09:31 -0700)
Debian now encourages building every program with various GCC hardening
options.  This commit implements that recommendation for Open vSwitch.

See https://wiki.debian.org/Hardening for details.

Found by lintian.

Signed-off-by: Ben Pfaff <blp@nicira.com>
debian/rules

index 51a2e51..608f127 100755 (executable)
@@ -39,6 +39,7 @@ configure-stamp:
                test -e Makefile || \
                ../configure --prefix=/usr --localstatedir=/var --enable-ssl \
                        --sysconfdir=/etc CFLAGS="$(CFLAGS)" \
+                       $(shell dpkg-buildflags --export=configure) \
                        $(DATAPATH_CONFIGURE_OPTS))
        touch configure-stamp