Your message dated Thu, 12 Mar 2026 10:04:11 +0000
with message-id <[email protected]>
and subject line Bug#1119357: fixed in autodir 0.99.9-19
has caused the Debian Bug report #1119357,
regarding autodir: please build using the default build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1119357: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1119357
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: autodir
Version: 0.99.9-18
User: [email protected]
Usertags: hardening-buildflags
autodir is not currently using the default build flags set by
dpkg-buildflags(1).
The default flags are chosen for multiple reasons including security,
performance, reproducibility, adherence to standards, and error handling.
Please make sure that autodir builds using the default build flags. blhc(1p)
and hardening-check(1) can be used to confirm that the issue is fixed.
In the general case, packages honoring CFLAGS, LDFLAGS, and other
similar environment variables get the default build flags for free
without the need for any work on the maintainer side. In the case of
autodir, the flags are either ignored or overridden.
The most common reasons for this are:
Hand-written Makefiles
----------------------
Some upstream Makefiles either override the values of variables such as
CFLAGS and similar or do not use them at all. See:
https://wiki.debian.org/HardeningWalkthrough#Handwritten_Makefiles
Misconfigured build systems
---------------------------
If the upstream code uses autotools, CMake, or other popular build
systems, it usually requires no further modifications. If might however
be that some variables are hardcoded in some way.
In this CMake snippet, the value of CXXFLAGS is overwritten with "-O2":
set(CMAKE_CXX_FLAGS "-O2")
If the intention is to append to CXXFLAGS, one should use the following
instead:
set(CMAKE_CXX_FLAGS "-O2 ${CMAKE_CXX_FLAGS}")
See #655870 for a similar autotools example.
Very old debhelper usage
------------------------
Packages not using dh(1), or those using a debhelper compatibility level
less than 9, need to manually include /usr/share/dpkg/buildflags.mk in
order for the dpkg-buildflags variables to be set:
https://wiki.debian.org/Hardening#dpkg-buildflags
Flags hardcoded in debian/rules (either voluntarily or not)
-----------------------------------------------------------
Some packages voluntarily hardcode the values of CFLAGS and friends in
debian/rules, ignoring the defaults set by dpkg-buildflags(1).
Others attempt to append to the variables, but end up accidentally
overriding the defaults:
#!/usr/bin/make -f
export CFLAGS += -pipe -fPIC -Wall
%:
dh $@
Debhelper only sets CFLAGS if it is not set yet. In the example above,
when dh is invoked the value of CFLAGS is "-pipe -fPIC -Wall", hence the
hardened defaults are not used. The right way to append to CFLAGS is
using DEB_CFLAGS_MAINT_APPEND instead, as documented in
dpkg-buildflags(1).
For a detailed analysis of this issue, see:
https://people.debian.org/~ema/nocflags_paper.pdf (eprint: hal-05334704)
--- End Message ---
--- Begin Message ---
Source: autodir
Source-Version: 0.99.9-19
Done: Francesco Paolo Lovergine <[email protected]>
We believe that the bug you reported is fixed in the latest version of
autodir, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Francesco Paolo Lovergine <[email protected]> (supplier of updated autodir
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 12 Mar 2026 10:37:36 +0100
Source: autodir
Binary: autodir autodir-dbgsym
Architecture: source amd64
Version: 0.99.9-19
Distribution: unstable
Urgency: medium
Maintainer: Francesco Paolo Lovergine <[email protected]>
Changed-By: Francesco Paolo Lovergine <[email protected]>
Description:
autodir - Automatically creates home and group directories for LDAP/NIS/SQL
Closes: 1119357 1130173
Changes:
autodir (0.99.9-19) unstable; urgency=medium
.
* Fixed typo in d/autodir.init (closes: #1130173)
* Changed unit files to kill the whole cgroup after timeout expiration. This
should prevent thread stucking when umount() can't finalize. To do that
moved -home and -group unitsfrome oneshot to proper forking.
* Changed systemd units in forking mode. This was typically a problem that
appears at upgrade time, with autohome/autogroup that appears stucked
waiting
for proper killing of a previous instance.
* Fixating CFLAGS override for gcc in configure (closes: #1119357)
* Policy bumped to 4.7.3. No specific changes applied.
* Minimal changes to make lintian more happy.
Checksums-Sha1:
9dd5bd9281355d8bc42a03181c9c040bbb0fd3cb 1891 autodir_0.99.9-19.dsc
783e054b33c16c3b0c37276ba710a1a51b0bdf99 25816 autodir_0.99.9-19.debian.tar.xz
4fd276e50e642446aab52a7b7e619dcca9fa9ed5 96204
autodir-dbgsym_0.99.9-19_amd64.deb
384e09587ba9b3cbabc757f90d1b772e959c64fc 6947 autodir_0.99.9-19_amd64.buildinfo
d35741d1ecdcfc23d82090fe99d25df0d8ee8360 70068 autodir_0.99.9-19_amd64.deb
Checksums-Sha256:
47d61ace378d1e0d475add02b69075f5e346200d1ee674cf87ac3b3cdbdc76da 1891
autodir_0.99.9-19.dsc
0a4099f0a22569b062c35e0af790c9bd848863ca2d6b34c23948f1da1c87cd8a 25816
autodir_0.99.9-19.debian.tar.xz
6fd14d12c2ad4808ecd5dee359039d2ce932b130eae6e85e1c57b363916f2a2e 96204
autodir-dbgsym_0.99.9-19_amd64.deb
ee844a6195affec01a51ff22fe95b4e86ba2b18bbd87f9fb76dd17b637c8fd55 6947
autodir_0.99.9-19_amd64.buildinfo
13286027b4f81d55f6c9058cd3897f02f06824280a8a908895dc4ef7d2f4b25e 70068
autodir_0.99.9-19_amd64.deb
Files:
b4a508ab8ba36715102b33cafea38da2 1891 utils optional autodir_0.99.9-19.dsc
f67a633e60b2d0f16af4aae91bb59b7c 25816 utils optional
autodir_0.99.9-19.debian.tar.xz
6f6e190ce5865044bdfc59d10b18ed52 96204 debug optional
autodir-dbgsym_0.99.9-19_amd64.deb
08be955a635ab68dbf19262cb3a6b87f 6947 utils optional
autodir_0.99.9-19_amd64.buildinfo
338fb898a4e1b3ccc4354361183d1d2c 70068 utils optional
autodir_0.99.9-19_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Q+Yj
-----END PGP SIGNATURE-----
pgpLt5BldBf1q.pgp
Description: PGP signature
--- End Message ---
