Your message dated Sun, 08 Apr 2012 11:49:54 +0000
with message-id <[email protected]>
and subject line Bug#667956: fixed in realtimebattle 1.0.8-12
has caused the Debian Bug report #667956,
regarding realtimebattle: LDFLAGS hardening flags missing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
667956: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=667956
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: realtimebattle
Version: 1.0.8-11
Severity: important
Tags: patch
Dear Maintainer,
The LDFLAGS hardening flags are missing because they are
overwritten in debian/rules.
The following patch fixes the issue.
diff -u realtimebattle-1.0.8/debian/rules realtimebattle-1.0.8/debian/rules
--- realtimebattle-1.0.8/debian/rules
+++ realtimebattle-1.0.8/debian/rules
@@ -18,7 +18,7 @@
build-stamp:
dh_testdir
- ./configure --prefix=/usr --with-rtb-dir=/usr/lib/realtimebattle
LDFLAGS=-Wl,--as-needed
+ ./configure --prefix=/usr --with-rtb-dir=/usr/lib/realtimebattle
LDFLAGS="$(LDFLAGS) -Wl,--as-needed"
touch config.h.in
if [ ! -x $(JAVAC) ]; then export ROBOTS="empty rotate_and_fire
seek_and_destroy xt-bot thomas2 joypad_robot perl-Skeleton perl raziel"; fi
To check if all flags were correctly enabled you can use
`hardening-check` from the hardening-includes package and check
the build log (hardening-check doesn't catch everything):
$ hardening-check /usr/games/realtimebattle
/usr/lib/realtimebattle/Robots/rtb-team-framework/rtb-team
/usr/lib/realtimebattle/Robots/xt-bot-b.robot ...
/usr/games/realtimebattle:
Position Independent Executable: no, normal executable!
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no not found!
/usr/lib/realtimebattle/Robots/rtb-team-framework/rtb-team:
Position Independent Executable: no, normal executable!
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no not found!
/usr/lib/realtimebattle/Robots/xt-bot-b.robot:
Position Independent Executable: no, normal executable!
Stack protected: yes
Fortify Source functions: unknown, no protectable libc functions used
Read-only relocations: yes
Immediate binding: no not found!
...
(Position Independent Executable and Immediate binding is not
enabled by default.)
Use find -type f \( -executable -o -name \*.so\* \) -exec
hardening-check {} + on the build result to check all files.
Regards,
Simon
[1]: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
[2]: https://wiki.debian.org/HardeningWalkthrough
[3]: https://wiki.debian.org/Hardening
--
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: realtimebattle
Source-Version: 1.0.8-12
We believe that the bug you reported is fixed in the latest version of
realtimebattle, which is due to be installed in the Debian FTP archive:
realtimebattle-common_1.0.8-12_all.deb
to main/r/realtimebattle/realtimebattle-common_1.0.8-12_all.deb
realtimebattle_1.0.8-12.diff.gz
to main/r/realtimebattle/realtimebattle_1.0.8-12.diff.gz
realtimebattle_1.0.8-12.dsc
to main/r/realtimebattle/realtimebattle_1.0.8-12.dsc
realtimebattle_1.0.8-12_amd64.deb
to main/r/realtimebattle/realtimebattle_1.0.8-12_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Rémi Vanicat <[email protected]> (supplier of updated realtimebattle package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 07 Apr 2012 21:47:18 +0200
Source: realtimebattle
Binary: realtimebattle realtimebattle-common
Architecture: source all amd64
Version: 1.0.8-12
Distribution: unstable
Urgency: low
Maintainer: Rémi Vanicat <[email protected]>
Changed-By: Rémi Vanicat <[email protected]>
Description:
realtimebattle - Programming game
realtimebattle-common - Programming game
Closes: 667956
Changes:
realtimebattle (1.0.8-12) unstable; urgency=low
.
* Bug fix: "LDFLAGS hardening flags missing", thanks to Simon Ruderich
(Closes: #667956).
Checksums-Sha1:
243de1dfd3af40c72fc463d9b71a88c10216ec09 1361 realtimebattle_1.0.8-12.dsc
e3dd591eadade1eecf05cccceb51bb14c3b7a41e 27638 realtimebattle_1.0.8-12.diff.gz
a97e7c1f483c51d7179035a436b374b443fb88cb 437762
realtimebattle-common_1.0.8-12_all.deb
381a1977b4f2009e8d55ca5fcafe85fcb6c0df71 434142
realtimebattle_1.0.8-12_amd64.deb
Checksums-Sha256:
dd1ce61a9aecca0c8e3becc82d70995d0e8b74e86ee4bf46bf6c910bc40b2e6e 1361
realtimebattle_1.0.8-12.dsc
835bc537f75b2281a181a0240725866143715a057a7f17ce96db29aea2ccd206 27638
realtimebattle_1.0.8-12.diff.gz
105ab47afae448f723277de31f95a16007fc9628fc5f85cf2675fab9f3d93399 437762
realtimebattle-common_1.0.8-12_all.deb
4daae039bbc14b76b2f67f429773cd7ff7fe45ffacae58f469ebe71a0298103f 434142
realtimebattle_1.0.8-12_amd64.deb
Files:
d07d62464a62916bd6776ae8d298dfb0 1361 games optional
realtimebattle_1.0.8-12.dsc
2444a844b9e1085fc590daa9d41509a7 27638 games optional
realtimebattle_1.0.8-12.diff.gz
18e208b0e3f6840220ac5b50c667d1c4 437762 games optional
realtimebattle-common_1.0.8-12_all.deb
a141a5a13df01943b1d7a43de9031182 434142 games optional
realtimebattle_1.0.8-12_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFPgJuqsOGY15BXtdMRAp7WAJ99YjHZ3euzwk06qfoXIX4lDZ4JbACdHlhM
Z1L62bXrwYTpX+Y/xYoybxQ=
=/QzL
-----END PGP SIGNATURE-----
--- End Message ---
