2012/8/30 Markus Koschany <a...@gambaru.de>: > Hi Juhani, > > i'm working on a debian package myself at the moment and i think the > recommended way to implement hardening is to use dpkg-buildflags. > > http://wiki.debian.org/HardeningWalkthrough
Oh, I hadn't spotted that wiki page. It gave me more information about hardening. > In case you're using debhelper 9 (compat level 9) you can simply put a > line like this at the top of debian/rules > > export DEB_BUILD_MAINT_OPTIONS = hardening=+all Compat level is indeed 9 (and Build-Depend on debhelper 9). Activating all hardening flags did produce a bit strange executable. I could not run it from file manager (it's Thunar 1.2.3-4+b1), it was identified as a "library". Running application from command line printed an extra zero character, and quitting the program, from its GUI or with Ctrl+C, exited also the terminal. Lintian reported the same error as it did without all hardening options. Otherwise the application worked though as expected. I uploaded my package to mentors.d.o: http://mentors.debian.net/package/fortuner it is without hardening+=all. Regards, Juhani Numminen -- To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/caa-+ft0dkqctch9wncssxdrdttcyjsrbktr_gh7ixjjeuom...@mail.gmail.com
