small fix in native filters
debian: follow hardening guidelines