Source: pyopenssl
Severity: normal
Tags: patch
User: [email protected]
Usertags: goal-hardening

Hi,

the attached patch enables the last hardening linker flag ("bindnow",
aka. -Wl,-z,now) applicable to this package, that's been left disabled
until now. Please consider applying it.

Thanks for maintaining pyopenssl in Debian!

Cheers,
--
intrigeri

diff -Nru pyopenssl-0.13.1/debian/rules pyopenssl-0.13.1/debian/rules
--- pyopenssl-0.13.1/debian/rules	2014-02-21 18:46:30.000000000 +0100
+++ pyopenssl-0.13.1/debian/rules	2014-08-14 14:11:22.000000000 +0200
@@ -7,6 +7,8 @@
 PY3VERS := $(shell py3versions -r -v)
 PYVERS := $(PY2VERS) $(PY3VERS)
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow
+
 %:
 	dh $@ --with python2,python3
 

Reply via email to