reopen 655891
thanks
On Sat, Jan 14, 2012 at 05:07:58PM +0100, Moritz Muehlenhoff wrote:
> Package: dmidecode
> Version: 2.11-4
> Severity: important
> Tags: patch
>
> Please enabled hardened build flags through dpkg-buildflags.
>
> Patch attached. I needed to make additional changes to the
> Makefile, since otherwise the flags configured in debian/rules
> are overridden.
>
> (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
The fix from dmidecode (2.11-5) is incomplete. You applied only parts
of my patch. debian/rules now has:
| override_dh_auto_build:
| dh_auto_build -- CFLAGS="$(CFLAGS) -Os -ansi"
But it's missing the LDFLAGS="$(LDFLAGS)" from my initial
patch. Hence, fortified source is missing, e.g.
$ hardening-check /usr/sbin/biosdecode
(..)
Fortify Source functions: no, no protected functions found!
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
