Re: Hardening release goal blocker

2011-12-14 Thread Kees Cook
On Wed, Dec 14, 2011 at 10:48:00AM +0700, Jonas Smedegaard wrote: > On 11-12-13 at 03:10pm, Kees Cook wrote: > > Notably, I'm curious about this: > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651964 > > > > I think this is broken behavior on CDBS's part, and that the "some > > packages" m

Re: Hardening release goal blocker

2011-12-13 Thread Jonas Smedegaard
Hi, On 11-12-13 at 03:10pm, Kees Cook wrote: > Hi, > > So, recently it came to my attention that CDBS is not behaving very > nicely with dpkg-buildflags, which is causing problems for us to meet > the release goal of getting more packages built with compiler > hardening enabled: > https://wik

Hardening release goal blocker

2011-12-13 Thread Kees Cook
Hi, So, recently it came to my attention that CDBS is not behaving very nicely with dpkg-buildflags, which is causing problems for us to meet the release goal of getting more packages built with compiler hardening enabled: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags Notably,