Enable hardening

diff --git a/debian/changelog b/debian/changelog
index a4aa1214d455617f7aca1b8d908df782cfbf0519..8acf0a892414f1886cd08bbfdd7347b51b921ab5 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ unscd (0.53-1.1) UNRELEASED; urgency=medium
   * Non-maintainer upload.
   * Add systemd notification support for startup error reporting.
   * Move Homepage into the source package (for the PTS) and use HTTPS.
+  * Enable hardening.
 
  -- Ferenc Wágner <wferi@debian.org>  Thu, 31 May 2018 12:03:28 +0200
 

diff --git a/debian/rules b/debian/rules
index e5e2a42358b9aec4a26b346c8a2a7f4828642e63..a5b6f487e82d013d9ddc4ff9f11cf38c806cc989 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,7 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
 %:
        dh $@ --with systemd
 
@@ -8,7 +10,7 @@ override_dh_auto_clean:
        dh_auto_clean
 
 override_dh_auto_build:
-       gcc $(CFLAGS) $(LDFLAGS) -o nscd nscd.c -lsystemd
+       gcc $(CPPFLAGS) $(CFLAGS) $(LDFLAGS) -o nscd nscd.c -lsystemd
        help2man --name 'nscd which does not hang' \
                --include debian/help2man \
                --no-info \