Hello, Applying the attached seems to be sufficient to enable hardened build flags. Maybe interesting to enable PIE and BINDNOW too.
diff -Nru nfs-utils-1.2.8/debian/rules nfs-utils-1.2.8/debian/rules --- nfs-utils-1.2.8/debian/rules 2014-08-13 02:12:43.000000000 +0200 +++ nfs-utils-1.2.8/debian/rules 2014-10-04 16:34:06.000000000 +0200 @@ -1,8 +1,11 @@ #! /usr/bin/make -f +DPKG_EXPORT_BUILDFLAGS = 1 +include /usr/share/dpkg/buildflags.mk + # Parsing of DEB_BUILD_OPTIONS flags. # Note that nostrip is handled automatically by debhelper. -CFLAGS := -g -Wall -DPIPEFS_DIR=\\\"/run/rpc_pipefs\\\" \ +CFLAGS += -g -Wall -DPIPEFS_DIR=\\\"/run/rpc_pipefs\\\" \ -DGSSD_PIPEFS_DIR=\\\"/run/rpc_pipefs\\\" ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
Attachment:
signature.asc
Description: This is a digitally signed message part