Package: xpdf
Version: 3.03-7
Severity: minor
Tags: patch
Hello,
This is just a minor issue.
Please change the hardening="+pie,+bindnow" line in debian/rules
to hardening="+all" to automatically add future hardening flags.
To make the debian/rules file a little shorter you can use the
new buildflags.mk file (needs dpkg-dev (>= 1.16.1.1)):
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
This obsoletes the following lines:
hardening="+pie,+bindnow"
CFLAGS=$(shell DEB_BUILD_MAINT_OPTIONS="hardening=${hardening}"
dpkg-buildflags --get CFLAGS)
LDFLAGS=$(shell DEB_BUILD_MAINT_OPTIONS="hardening=${hardening}"
dpkg-buildflags --get LDFLAGS)
CPPFLAGS=$(shell DEB_BUILD_MAINT_OPTIONS="hardening=${hardening}"
dpkg-buildflags --get CPPFLAGS)
CXXFLAGS=$(shell DEB_BUILD_MAINT_OPTIONS="hardening=${hardening}"
dpkg-buildflags --get CXXFLAGS)
Or you could switch to debian/compat=9 and just use the following
line:
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
See [1] and [2] for more information.
Regards,
Simon
[1]: https://wiki.debian.org/Hardening
[2]: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.1.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
