http://wiki.debian.org/Hardening
Several compile-time options (detailed below) can be used to help harden a
resulting binary against memory corruption attacks, or provide additional
warning messages during compiles. This can be done either through
"dpkg-buildflags", or one of the packages provided by the
"src:hardening-wrapper" source: "hardening-wrapper" or "hardening-includes".
Using "dpkg-buildflags" is the recommended way to incorporate the build flags
in Debian.
"hardening-wrapper" is a set of scripts that divert the compiler, designed to
help provide these options without requiring packaging changes.
Component-BuildEnvironment: make sure the flags are used?
Deployment: packaging
Security: compiling with said flags
Original issue reported on code.google.com by geo...@marsel.is on 25 May 2013 at 11:04
Original issue reported on code.google.com by
geo...@marsel.is
on 25 May 2013 at 11:04