On Wed, Dec 07, 2016 at 06:22:50PM +0100, Hilmar Preuße wrote: > Am 06.10.2016 um 22:20 tastete Mattia Rizzolo: > >On Thu, Oct 06, 2016 at 06:55:22PM +0200, Hilmar Preuße wrote: > >9) now that you're like this you can reinstate hardening, that you > > removed but not replaced, so just put > > export DEB_BUILD_MAINT_OPTIONS = hardening=+all > > on top, it should just work after the changs above > > > I did not remove any hardening implementation. It is just there as before: > AFAICT the following code should bring them in: > ./configure $(shell dpkg-buildflags --export=configure) > I just removed the test, which checked the presence of the hardening flags.
AFAIK
$(shell dpkg-buildflags --export=configure)
doesn't get you all hardening options (including non-default optional
ones, like pie (everywhere, now it's default in some archs, but in
October wasn't) and bindnow).
> I'm working on your list to go to compat level 9 and dh_auto_configure.
Be aware that if you want to see your package in stretch you need to
hurry, as the freeze is approaching: it has to be in sid by Christmas,
and hope you won't get new RC bugs after that.
See https://release.debian.org/#release-dates
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
more about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
