Source: xorg-server Version: 2:21.1.7-1 Tags: security,patch Dear Maintaner,
please enable full hardening flags for Xorg; in particular currently the link feature BINDNOW[1] is missing. As Xorg is a long running daemon any potential startup costs are negligible. [1]: https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29 --- rules.bak 2023-02-26 17:19:55.678436715 +0100 +++ rules 2023-02-26 17:20:04.798284731 +0100 @@ -4,6 +4,8 @@ include /usr/share/dpkg/architecture.mk +export DEB_BUILD_MAINT_OPTIONS = hardening=+all + %: dh $@ --with quilt
