Package: sed
Version: 4.2.1-9
Severity: important
Tags: patch

Please enable hardened build flags through dpkg-buildflags.

Patch attached.

Cheers,
        Moritz
diff -aur sed-4.2.1.orig/debian/rules sed-4.2.1/debian/rules
--- sed-4.2.1.orig/debian/rules	2011-02-11 22:57:03.000000000 +0100
+++ sed-4.2.1/debian/rules	2011-12-30 15:38:16.000000000 +0100
@@ -11,18 +11,17 @@
 CONFARGS = --host=$(DEB_HOST_GNU_TYPE)
 endif
 
-CFLAGS = -Wall -g
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
+
 INSTALL = install
 INSTALL_FILE    = $(INSTALL) -p    -o root -g root  -m  644
 INSTALL_PROGRAM = $(INSTALL) -p    -o root -g root  -m  755
 INSTALL_SCRIPT  = $(INSTALL) -p    -o root -g root  -m  755
 INSTALL_DIR     = $(INSTALL) -p -d -o root -g root  -m  755
 
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS += -O0
-else
-CFLAGS += -O2
-endif
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
 INSTALL_PROGRAM += -s
 endif
@@ -44,7 +43,7 @@
 	test ! -f Makefile || $(MAKE) distclean
 
 Makefile: Makefile.in
-	CFLAGS="$(CFLAGS)" ./configure --prefix=/usr \
+	CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure --prefix=/usr \
 			--exec-prefix=/ \
 			--datadir=/usr/share \
 			--mandir=/usr/share/man \
Nur in sed-4.2.1/debian: rules~.

Reply via email to