projects
/
ossec-hids.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
- enable fortify as well
[ossec-hids.git]
/
debian
/
rules
diff --git
a/debian/rules
b/debian/rules
index
6150881
..
ef79557
100755
(executable)
--- a/
debian/rules
+++ b/
debian/rules
@@
-11,6
+11,11
@@
DESTDIR = $(PKGDIR)/var/ossec
# OSSEC INSTALL SUBDIRS
SUBDIRS = .ssh active-response active-response/bin agentless bin etc etc/shared logs logs/alerts logs/archives logs/firewall queue queue/agent-info queue/agentless queue/alerts queue/diff queue/fts queue/ossec queue/rids queue/rootcheck queue/syscheck rules stats tmp var var/run
# OSSEC INSTALL SUBDIRS
SUBDIRS = .ssh active-response active-response/bin agentless bin etc etc/shared logs logs/alerts logs/archives logs/firewall queue queue/agent-info queue/agentless queue/alerts queue/diff queue/fts queue/ossec queue/rids queue/rootcheck queue/syscheck rules stats tmp var var/run
+###################### hardening #################
+
+export DEB_BUILD_HARDENING=1
+export DEB_BUILD_HARDENING_FORTIFY=1
+
###################### main ######################
build: build-stamp
###################### main ######################
build: build-stamp
@@
-22,6
+27,9
@@
build-stamp:
touch build-stamp
touch build-stamp
+build-arch: build
+build-indep: build
+
clean:
dh_testdir
dh_testroot
clean:
dh_testdir
dh_testroot
@@
-44,7
+52,7
@@
clean:
install: build
dh_testdir
dh_testroot
install: build
dh_testdir
dh_testroot
- dh_clean -k
+ dh_prep
dh_installdirs
# ugly directory creation
dh_installdirs
# ugly directory creation
@@
-94,7
+102,7
@@
install: build
chmod 550 $(DESTDIR)/bin/*
chmod 440 $(DESTDIR)/etc/ossec.conf
chmod 550 $(DESTDIR)/bin/*
chmod 440 $(DESTDIR)/etc/ossec.conf
- # fixups: no need for execute bits on files there
+ # fixups: no need for execute bits on files there
find $(DESTDIR)/rules -type f -exec chmod ugo-x '{}' ';'
find $(DESTDIR)/etc -type f -exec chmod ugo-x '{}' ';'
find $(DESTDIR)/rules -type f -exec chmod ugo-x '{}' ';'
find $(DESTDIR)/etc -type f -exec chmod ugo-x '{}' ';'
@@
-116,6
+124,10
@@
install: build
# Build architecture-independent files here.
binary-indep: build install
# Build architecture-independent files here.
binary-indep: build install
+# We have nothing to do by default.
+
+# Build architecture-dependent files here.
+binary-arch: build install
dh_testdir
dh_testroot
dh_installchangelogs
dh_testdir
dh_testroot
dh_installchangelogs
@@
-132,6
+144,7
@@
binary-indep: build install
# dh_installcron
# dh_installinfo
# dh_undocumented
# dh_installcron
# dh_installinfo
# dh_undocumented
+ dh_lintian
dh_installman
dh_link
dh_compress
dh_installman
dh_link
dh_compress
@@
-139,13
+152,10
@@
binary-indep: build install
# dh_perl
# dh_python
dh_installdeb
# dh_perl
# dh_python
dh_installdeb
+ dh_shlibdeps
dh_gencontrol
dh_md5sums
dh_builddeb
dh_gencontrol
dh_md5sums
dh_builddeb
-# Build architecture-dependent files here.
-binary-arch: build install
-# We have nothing to do by default.
-
binary: binary-indep binary-arch
.PHONY: build clean binary-indep binary-arch binary install
binary: binary-indep binary-arch
.PHONY: build clean binary-indep binary-arch binary install