PIE and static libraries

2016-05-21 Thread Andreas Metzler
Hello, https://lintian.debian.org/tags/hardening-no-pie.html says "It is unlikely to work when compiling static libraries or executables (gcc -static)." However e.g. https://wiki.debian.org/Hardening does not mention this problem. Is the former incorrect or the latter incomplete? cu Andreas --

Re: tools to share binary attachments

2016-05-21 Thread Paul Wise
On Sun, May 22, 2016 at 1:49 AM, Mateus Bellomo wrote: > I would like to share a bustle binary file and I'm wondering if is there any > tool to do that. I know about paste.debian.net but it is only possible to > share text files. Usually people upload files like that to their website or if they d

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Theodore Ts'o
On Sat, May 21, 2016 at 09:21:55PM +0200, Christian Seiler wrote: > ><<> > > Hope that helps. Yes, that was incredibly helpful. Thanks!!! - Ted

Re: Bug#824884: netbase: should not recommend ifupdown

2016-05-21 Thread Guus Sliepen
On Fri, May 20, 2016 at 09:08:29PM +0200, Marco d'Itri wrote: > Does anybody see a reason to NOT remove the recommends? I don't see a reason either. About the description of the netbase package though: it currently only contains for text files in /etc that are seldomly used. For fun I just purge

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Christian Seiler
On 05/21/2016 07:32 PM, Theodore Ts'o wrote: > If the pie hardening option is enabled, then dpkg-buildflags --get > LDFLAGS emits: > > -fPIE -pie -Wl,-z,relro > > According to the dpkg-buildflags man page: > >LDFLAGS > Options passed to the compiler when linking

Re: Bug#824884: netbase: should not recommend ifupdown

2016-05-21 Thread Michael Biebl
Am 20.05.2016 um 21:08 schrieb Marco d'Itri: > Does anybody see a reason to NOT remove the recommends? I seems to have been a Depends in the past and was demoted to Recommends quite a while ago. Why it was added in the first place I can't seem to find in the debian changelog. Personally I don't se

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Christian Kastner
On 2016-05-21 19:32, Theodore Ts'o wrote: > What is the suggested workaround if you have a package that has both > executables and shared libraries, and you want to enable pie > hardening for the executables? Here's one possible solution: https://sources.debian.net/src/keyutils/1.5.9-9/debia

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Andrey Rahmatullin
On Sat, May 21, 2016 at 01:32:19PM -0400, Theodore Ts'o wrote: > If the pie hardening option is enabled, then dpkg-buildflags --get > LDFLAGS emits: > > -fPIE -pie -Wl,-z,relro > > According to the dpkg-buildflags man page: > >LDFLAGS > Options passed to the compile

tools to share binary attachments

2016-05-21 Thread Mateus Bellomo
Hello, I would like to share a bustle binary file and I'm wondering if is there any tool to do that. I know about paste.debian.net but it is only possible to share text files. The reason I need that tool is that is not possible to send attachments to mailing lists. Thanks in advance.

DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Theodore Ts'o
If the pie hardening option is enabled, then dpkg-buildflags --get LDFLAGS emits: -fPIE -pie -Wl,-z,relro According to the dpkg-buildflags man page: LDFLAGS Options passed to the compiler when linking executables or shared objects Unfortunate the

Re: Empty Contents and Packages files in http://deb.debian.org/debian-debug?

2016-05-21 Thread Niels Thykier
Theodore Ts'o: > One other thought. Since someone might be trying to debug a core file > for an executable belonging to a package which has since been > superceded by a newer version in unstable or in testing, it would be > useful if there was a Redis (or some other NoSQL) database where you > can

Re: Empty Contents and Packages files in http://deb.debian.org/debian-debug?

2016-05-21 Thread Theodore Ts'o
One other thought. Since someone might be trying to debug a core file for an executable belonging to a package which has since been superceded by a newer version in unstable or in testing, it would be useful if there was a Redis (or some other NoSQL) database where you can look up a Build-ID and g

Re: Empty Contents and Packages files in http://deb.debian.org/debian-debug?

2016-05-21 Thread Theodore Ts'o
On Sat, May 21, 2016 at 04:34:19AM +, Niels Thykier wrote: > > Also, does anyone know if someone is working on a FUSE client that > > could be mounted on top of /usr/lib/debug/.build-id so that the > > debuginfo files could be automatically made available as needed when > > gdb tries to access

Bug#824919: ITP: eja -- a micro web server for static and dynamic Lua generated content

2016-05-21 Thread Ubaldo Porcheddu
Package: wnpp Severity: wishlist Owner: Ubaldo Porcheddu * Package name: eja Version : 9.5.20 Upstream Author : Ubaldo Porcheddu * URL : https://github.com/ubaldus/eja * License : GPL Programming Lang: C, Lua Description : a micro web server for static

Re: Empty Contents and Packages files in http://deb.debian.org/debian-debug?

2016-05-21 Thread Jason Crain
On Sat, May 21, 2016 at 12:12:11AM -0400, Theodore Ts'o wrote: > Hi, is it intended that the Contents and Packages file in the dbgsyms > archive are empty? > > I was hoping to be able to add http://debug.mirrors.debian.org/debian-debug/ > to my > apt.sources list so I could easily download the db

Re: keyring package

2016-05-21 Thread Konstantin Demin
Hello! Good way to add/remove keyrings without wasting trusted system keyring is to copy/symlink keyrings to /etc/apt/trusted.gpg.d/ directory. 2016-05-21 4:55 GMT+03:00 Hideki Yamane : > Hi, > > We have those keyring packages. > > $ LANG=C apt-cache search archive-keyring > debian-archive-keyri