Source: systemtap
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur systemtap-1.6.orig/debian/rules systemtap-1.6/debian/rules
--- systemtap-1.6.orig/debian/rules 2011-07-29 12:33:10.000000000 +0200
+++ systemtap-1.6/debian/rules 2012-01-14 15:19:06.000000000 +0100
@@ -9,16 +9,8 @@
get-orig-source:
uscan --force-download --rename --repack --download-version=$(DEB_UPSTREAM_VERSION) --destdir=.
-
-CFLAGS = -Wall -g -D_GNU_SOURCE
-
-ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
-CXXFLAGS = $(CFLAGS)
-export CFLAGS CXXFLAGS
+DEB_CFLAGS_MAINT_APPEND=-Wall -D_GNU_SOURCE
+DEB_CXXFLAGS_MAINT_APPEND=-Wall -D_GNU_SOURCE
ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
NUMJOBS = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
@@ -40,7 +32,7 @@
endif
# dh does it wrong...
-CONF_FLAGS += --libexecdir=/usr/lib
+CONF_FLAGS += --libexecdir=/usr/lib $(shell dpkg-buildflags --export=configure)
DH = dh
Nur in systemtap-1.6/debian: rules~.
