Hello,
https://lintian.debian.org/tags/hardening-no-pie.html says "It is
unlikely to work when compiling static libraries or executables (gcc
-static)."
However e.g. https://wiki.debian.org/Hardening does not mention this
problem. Is the former incorrect or the latter incomplete?
cu Andreas
--
On Sun, May 22, 2016 at 1:49 AM, Mateus Bellomo wrote:
> I would like to share a bustle binary file and I'm wondering if is there any
> tool to do that. I know about paste.debian.net but it is only possible to
> share text files.
Usually people upload files like that to their website or if they
d
On Sat, May 21, 2016 at 09:21:55PM +0200, Christian Seiler wrote:
>
><<>
>
> Hope that helps.
Yes, that was incredibly helpful. Thanks!!!
- Ted
On Fri, May 20, 2016 at 09:08:29PM +0200, Marco d'Itri wrote:
> Does anybody see a reason to NOT remove the recommends?
I don't see a reason either.
About the description of the netbase package though: it currently only
contains for text files in /etc that are seldomly used. For fun I just
purge
On 05/21/2016 07:32 PM, Theodore Ts'o wrote:
> If the pie hardening option is enabled, then dpkg-buildflags --get
> LDFLAGS emits:
>
> -fPIE -pie -Wl,-z,relro
>
> According to the dpkg-buildflags man page:
>
>LDFLAGS
> Options passed to the compiler when linking
Am 20.05.2016 um 21:08 schrieb Marco d'Itri:
> Does anybody see a reason to NOT remove the recommends?
I seems to have been a Depends in the past and was demoted to Recommends
quite a while ago. Why it was added in the first place I can't seem to
find in the debian changelog.
Personally I don't se
On 2016-05-21 19:32, Theodore Ts'o wrote:
> What is the suggested workaround if you have a package that has both
> executables and shared libraries, and you want to enable pie
> hardening for the executables?
Here's one possible solution:
https://sources.debian.net/src/keyutils/1.5.9-9/debia
On Sat, May 21, 2016 at 01:32:19PM -0400, Theodore Ts'o wrote:
> If the pie hardening option is enabled, then dpkg-buildflags --get
> LDFLAGS emits:
>
> -fPIE -pie -Wl,-z,relro
>
> According to the dpkg-buildflags man page:
>
>LDFLAGS
> Options passed to the compile
Hello,
I would like to share a bustle binary file and I'm wondering if is there
any tool to do that. I know about paste.debian.net but it is only possible
to share text files.
The reason I need that tool is that is not possible to send attachments to
mailing lists.
Thanks in advance.
If the pie hardening option is enabled, then dpkg-buildflags --get
LDFLAGS emits:
-fPIE -pie -Wl,-z,relro
According to the dpkg-buildflags man page:
LDFLAGS
Options passed to the compiler when linking executables or
shared objects
Unfortunate the
Theodore Ts'o:
> One other thought. Since someone might be trying to debug a core file
> for an executable belonging to a package which has since been
> superceded by a newer version in unstable or in testing, it would be
> useful if there was a Redis (or some other NoSQL) database where you
> can
One other thought. Since someone might be trying to debug a core file
for an executable belonging to a package which has since been
superceded by a newer version in unstable or in testing, it would be
useful if there was a Redis (or some other NoSQL) database where you
can look up a Build-ID and g
On Sat, May 21, 2016 at 04:34:19AM +, Niels Thykier wrote:
> > Also, does anyone know if someone is working on a FUSE client that
> > could be mounted on top of /usr/lib/debug/.build-id so that the
> > debuginfo files could be automatically made available as needed when
> > gdb tries to access
Package: wnpp
Severity: wishlist
Owner: Ubaldo Porcheddu
* Package name: eja
Version : 9.5.20
Upstream Author : Ubaldo Porcheddu
* URL : https://github.com/ubaldus/eja
* License : GPL
Programming Lang: C, Lua
Description : a micro web server for static
On Sat, May 21, 2016 at 12:12:11AM -0400, Theodore Ts'o wrote:
> Hi, is it intended that the Contents and Packages file in the dbgsyms
> archive are empty?
>
> I was hoping to be able to add http://debug.mirrors.debian.org/debian-debug/
> to my
> apt.sources list so I could easily download the db
Hello!
Good way to add/remove keyrings without wasting trusted system keyring
is to copy/symlink keyrings to /etc/apt/trusted.gpg.d/ directory.
2016-05-21 4:55 GMT+03:00 Hideki Yamane :
> Hi,
>
> We have those keyring packages.
>
> $ LANG=C apt-cache search archive-keyring
> debian-archive-keyri
16 matches
Mail list logo