On Mon, May 14, 2012 at 01:45:54PM +0200, Andreas Henriksson wrote: > On Mon, May 14, 2012 at 12:55:38PM +0200, Andreas Henriksson wrote: > > I'm not loving it though. Is there really no prettier way to do this? > > Looks like with a little help from a change currently sitting in upstream > git pending release, we should simply be able to override CCOPTS and > LDFLAGS on the make command line. > > See: > http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=commitdiff;h=c8610020b802a63cbf463b7d31f03a86f4acaa04 > > i.e.: > make LDFLAGS="`dpkg-buildflags --get LDFLAGS`" CCOPTS="`dpkg-buildflags --get > CFLAGS` `dpkg-buildflags --get CPPFLAGS`"
Looks good. > I'll need to verify this method actually works properly and also that the > dynamic loading of (ip/tc) modules doesn't break because of this..... > Help and reassurance always welcome. :) http://wiki.debian.org/HardeningWalkthrough describes how to test if your hardening modifications are sufficient. Cheers, Moritz -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
