Hi!
A package I maintain within the team (python3-pyxdameraulevenshtein)
gives the following lintian message:
I: python3-pyxdameraulevenshtein: hardening-no-bindnow
[usr/lib/python3/dist-packages/pyxdameraulevenshtein.cpython-310-x86_64-linux-gnu.so]
The debian/rules file is very bland, essentially:
%:
dh $@ --buildsystem=pybuild
and there is nothing about CFLAGS or the like in the setup.py file.
So if having this hardening flag enabled is a good thing, it should
probably be enabled somewhere within the pybuild system, rather than
every individual package with an extension file doing it.
Or have I missed something?
Best wishes,
Julian