Source: zabbix
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
Nur in zabbix-1.8.9/debian: #rules#.
diff -aur zabbix-1.8.9.harden/debian/rules zabbix-1.8.9/debian/rules
--- zabbix-1.8.9.harden/debian/rules 2011-12-19 23:04:54.000000000 +0100
+++ zabbix-1.8.9/debian/rules 2012-01-21 18:02:34.000000000 +0100
@@ -64,13 +64,8 @@
INSTALL_SCRIPT = $(INSTALL) -p -oroot -groot -m755
INSTALL_DIR = $(INSTALL) -p -d -oroot -groot -m755
-CFLAGS = -Wall -g
+DEB_CFLAGS_MAINT_APPEND=-Wall
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
INSTALL_PROGRAM += -s
endif
@@ -83,6 +78,7 @@
--prefix=/usr \
--mandir=\$${prefix}/share/man \
--infodir=\$${prefix}/share/info \
+ $(shell dpkg-buildflags --export=configure) \
--enable-server \
--enable-agent \
--enable-proxy \
Nur in zabbix-1.8.9/debian: rules~.