diff --git a/debian/rules b/debian/rules
index 1139fa0..aca0a06 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,8 +1,11 @@
 #!/usr/bin/make -f
 
+CFLAGS  := -g -O2 -fstack-protector-all -fPIE
+LDFLAGS := -pie
+
 build:
 	python setup.py -q build
-	cd src && make
+	cd src && make CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)"
 
 clean:
 	dh_testdir
diff --git a/src/Makefile b/src/Makefile
index c564a8f..62f9cf2 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -1,5 +1,7 @@
-CFLAGS ?= -ggdb -Wall -O2
-CFLAGS += -I../include
+CFLAGS   := -g3 -O2 -Wall -Werror -DDEBUG
+INCLUDES := -I../include $(shell krb5-config --cflags)
+override LDFLAGS += -std=gnu99 $(INCLUDES)
+override CFLAGS  += -std=gnu99 $(INCLUDES)
 
 LIBCEO_OBJECTS := util.o common.o config.o parser.o ldap.o krb5.o kadm.o addhomedir.o
 LIBCEO_LDFLAGS := -lldap $(shell krb5-config --libs krb5 kadm-client)