dpkg-buildflags bindnow

[Jonathon Love <jon@thon.love>]

hi,

i'm packaging something, and receiving the lintian 'no-bindnow' warning.

one proposed solution[1] is to add

    $(shell dpkg-buildflags --get LDFLAGS)

to the LDFLAGS

however, dpkg-buildflags does *not* add flags for bindnow by default[2], 
and the system needs additional configuration to add these.

is it right to assume that the debian build machines will have bindnow 
hardening in dpkg-buildflags turned on? or do i need to manually add the 
`-Wl,-z,now` myself?

with thanks

jonathon


[1] https://wiki.debian.org/Hardening

[2] man dpkg-buildflags