Enable all hardening flags

diff --git a/debian/changelog b/debian/changelog
index c750eccc0960dbd7245476c8ea0b6053524ff491..413b62cc14039d590227954967ec8834d9b8858e 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -19,6 +19,7 @@ krb5-strength (3.1-1) UNRELEASED; urgency=medium
   * Switch to https for all package URLs.
   * Run wrap-and-sort -ast.
   * Refresh upstream signing key.
+  * Enable all hardening flags.
 
  -- Russ Allbery <rra@debian.org>  Sun, 13 Apr 2014 12:23:18 -0700
 

diff --git a/debian/rules b/debian/rules
index eb56563bd15a31420a1ec4fa622ec131d6261769..b35fb8f246d3fff926248407a2dd0f3b94e30bac 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 
 # Add hardening build flags.
-export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow,+pie
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
 PACKAGE := $(shell dh_listpackages)