Hello, On 2012 m. of April 8 d., Sunday 14:54:36 Simon Ruderich wrote: > > I don't know debhelper very well, but I think changing that would > require raising the compat level - which means it would take > quite a while to get the flags correctly enabled.
There is a possibility that compat bump won't be needed [1]. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=646129 > > >> To accomplish the hardening flags release goal for Wheezy, adding > >> the CPPFLAGS manually seems to be the only way. > > > > Not in each and every package, sorry. > > Could you add the fix for those of your packages which are > priority important or are security relevant (parse untrusted > data) or had a DSA? No, really, adding unnecesarry code into packaging is not the way to go. While a proper solution in cmake is not available (it won't be enabled by default though so cdbs / dh will need changes regardless), some hacks could be added to cdbs cmake.mk / dh cmake buildsystem given maintainers are willing to accept those hacks. So in my opinion, your effort would be better spent if you directed it into that direction. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
