Commit Graph

10 Commits

Author SHA1 Message Date
Keegan McAllister 57950275fb Disable dpkg stack protector flag in the new way
Suggested by Kees Cook.
2012-04-17 03:18:01 -04:00
Keegan McAllister 4babd4785e Disable dpkg-based setting of stack protector flags
Through Autoconf we set hardening flags that are actually more aggressive than
the Ubuntu defaults, but they conflict with same.
2012-04-17 01:54:31 -04:00
Keegan McAllister 0eec0b60f0 Linux: Use our own signalfd wrapper, rather than libstddjb
selfpipe already does a fine job of interfacing to signalfd.  But Debian and
Ubuntu want us to depend on the skalibs-dev package rather than build libstddjb
ourselves.  That would be fine except that skalibs-dev has static libraries
only, and they aren't built with -fPIC.  This interferes with building
mosh-{client,server} as position-independent executables, which is a desirable
security measure.

So we have our own wrapper, which invokes either signalfd or selfpipe.  And we
build it ourselves with our own flags, because it's part of the Mosh project
proper.

(closes #108)
2012-04-13 12:33:21 -04:00
Anders Kaseorg 6d65fe9f79 Add configure options for external skalibs
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2012-03-07 03:05:37 -05:00
Anders Kaseorg c71f8e2dc2 Use automake’s silent-rules mode if available, for quieter build output
With automake 1.11, this gives us Linux kernel–style silent output
that makes warnings more obvious:

  GEN    userinput.pb.cc
  CXX    userinput.pb.o
  AR     libmoshprotos.a
  CXXLD  mosh-client

(Use ‘make V=1’ for the traditional verbose output.)

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2012-03-07 03:05:35 -05:00
Anders Kaseorg aad760e7d6 Make warning CXXFLAGS configurable
This turns off -Werror by default except in the Debian package.
-Werror is inherently unportable and breaks things on OS X.  While it
can cause problems in Debian too, this is at least a little better.

It also turns off -pedantic in src/protobufs, because apparently
protoc output doesn’t compile with -pedantic on all platforms.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2012-03-07 03:05:35 -05:00
Keith Winstein 8fa8bac35e Distribute README.md with Debian package instead of copying to README
[andersk@mit.edu: No changes, but I note for the record that dh
 overrides require a debhelper (>= 7.0.50) dependency that should have
 been listed in the control file, and there was nothing to clean up
 README after it was copied.]
2012-03-07 03:05:35 -05:00
Keegan McAllister 5ab8a8332a Copy README.md to README in the Debian build 2012-03-05 12:31:37 -08:00
Keith Winstein 2611a42fb1 Move protobufs inside src and distribute /debian 2012-02-06 16:41:58 -05:00
Keith Winstein 38c27149ee First packaging info 2012-02-06 16:20:18 -05:00