Your message dated Sun, 08 Apr 2012 21:48:18 +0000
with message-id <[email protected]>
and subject line Bug#667931: fixed in ifd-gempc 1.0.7-1
has caused the Debian Bug report #667931,
regarding ifd-gempc: Hardening flags missing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
667931: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=667931
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ifd-gempc
Version: 1.0.6-6
Severity: important
Tags: patch
Dear Maintainer,
The hardening flags are missing in a few places because the build
system ignores them.
The attached patch fixes the issue, if possible it should be sent
upstream.
To check if all flags were correctly enabled you can use
`hardening-check` from the hardening-includes package and check
the build log (hardening-check doesn't catch everything):
$ hardening-check
/usr/lib/pcsc/drivers/ifd-GemPC430.bundle/Contents/Linux/libGemPC430.so.1.0.6
/usr/lib/pcsc/drivers/serial/libGemPC410.so.1.0.6
/usr/lib/pcsc/drivers/ifd-GemPC430.bundle/Contents/Linux/libGemPC430.so.1.0.6:
Position Independent Executable: no, regular shared library (ignored)
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no not found!
/usr/lib/pcsc/drivers/serial/libGemPC410.so.1.0.6:
Position Independent Executable: no, regular shared library (ignored)
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no not found!
(Position Independent Executable and Immediate binding is not
enabled by default.)
Use find -type f \( -executable -o -name \*.so\* \) -exec
hardening-check {} + on the build result to check all files.
Regards,
Simon
[1]: https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
[2]: https://wiki.debian.org/HardeningWalkthrough
[3]: https://wiki.debian.org/Hardening
--
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
Description: Use build flags from environment (dpkg-buildflags).
Necessary for hardening flags.
Author: Simon Ruderich <[email protected]>
Last-Update: 2012-04-07
--- ifd-gempc-1.0.6.orig/GemPC410/Makefile
+++ ifd-gempc-1.0.6/GemPC410/Makefile
@@ -33,14 +33,14 @@ common:
$(MAKE) -C ../common CFLAGS="$(CFLAGS) -I../GemPC410" all
ifd-GemPC410: common $(targets) main.o ../common/GCdebug.o
- $(CC) -o $@ $(targets) $(common_targets) main.o ../common/GCdebug.o
+ $(CC) -o $@ $(CFLAGS) $(LDFLAGS) $(targets) $(common_targets) main.o ../common/GCdebug.o
resetGemPC410: resetGemPC410.o
- $(CC) -o $@ $^
+ $(CC) -o $@ $(CFLAGS) $(LDFLAGS) $^
libGemPC410.so: common $(targets)
rm -f $@
- $(CC) -shared $(LDFLAGS) $(targets) $(common_targets) -o $@
+ $(CC) -shared $(CFLAGS) $(LDFLAGS) $(targets) $(common_targets) -o $@
chmod -x $@
mv $@ $@.$(version)
--- ifd-gempc-1.0.6.orig/GemPC430/Makefile
+++ ifd-gempc-1.0.6/GemPC430/Makefile
@@ -35,13 +35,13 @@ common:
$(MAKE) -C ../common CFLAGS="$(CFLAGS) -I../GemPC430" all
ifd-GemPC430: common $(targets) main.o ../common/GCdebug.o
- $(CC) $(LDFLAGS) -o $@ $(targets) $(common_targets) main.o ../common/GCdebug.o $(LIBS)
+ $(CC) $(CFLAGS) $(LDFLAGS) -o $@ $(targets) $(common_targets) main.o ../common/GCdebug.o $(LIBS)
libGemPC430.so: common $(targets)
- $(CC) -shared $(LDFLAGS) -o $@ $(targets) $(common_targets) $(LIBS)
+ $(CC) -shared $(CFLAGS) $(LDFLAGS) -o $@ $(targets) $(common_targets) $(LIBS)
main.o: ../GemPC410/main.c
- $(CC) $(CFLAGS) -c -o $@ $^
+ $(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -c -o $@ $^
clean:
rm -f .dependencies
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: ifd-gempc
Source-Version: 1.0.7-1
We believe that the bug you reported is fixed in the latest version of
ifd-gempc, which is due to be installed in the Debian FTP archive:
ifd-gempc_1.0.7-1.debian.tar.gz
to main/i/ifd-gempc/ifd-gempc_1.0.7-1.debian.tar.gz
ifd-gempc_1.0.7-1.dsc
to main/i/ifd-gempc/ifd-gempc_1.0.7-1.dsc
ifd-gempc_1.0.7.orig.tar.gz
to main/i/ifd-gempc/ifd-gempc_1.0.7.orig.tar.gz
libgempc410_1.0.7-1_amd64.deb
to main/i/ifd-gempc/libgempc410_1.0.7-1_amd64.deb
libgempc430_1.0.7-1_amd64.deb
to main/i/ifd-gempc/libgempc430_1.0.7-1_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ludovic Rousseau <[email protected]> (supplier of updated ifd-gempc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 08 Apr 2012 23:36:51 +0200
Source: ifd-gempc
Binary: libgempc410 libgempc430
Architecture: source amd64
Version: 1.0.7-1
Distribution: unstable
Urgency: low
Maintainer: Ludovic Rousseau <[email protected]>
Changed-By: Ludovic Rousseau <[email protected]>
Description:
libgempc410 - PC/SC driver for the GemPC 410, 412, 413 and 415 smart card reade
libgempc430 - PC/SC driver for the GemPC 430, 432, 435 smart card readers
Closes: 667931
Changes:
ifd-gempc (1.0.7-1) unstable; urgency=low
.
* New upstream release
* Fix "Hardening flags missing" fixed upstream (Closes: #667931)
* debian/patches/01_spelling: merged upstream
Checksums-Sha1:
102248be84513abb237e8fe51f805489345abc05 1208 ifd-gempc_1.0.7-1.dsc
7f30e93cf421e80b5303f47d75fe4a78397a3004 76712 ifd-gempc_1.0.7.orig.tar.gz
bf95a6d33730868e337b90e4c90baa6b2a7398d9 12963 ifd-gempc_1.0.7-1.debian.tar.gz
afcab6643fbf07e8c4fabaeeaf10ba06d1de0ab3 45226 libgempc410_1.0.7-1_amd64.deb
b9f194e9027af82e3da5291557682a94902f9f6f 40644 libgempc430_1.0.7-1_amd64.deb
Checksums-Sha256:
aafeeee4df15ade64cc3a813614320a1ea1c3dee3f934ffeeb2308bf0e6e60aa 1208
ifd-gempc_1.0.7-1.dsc
604e4bb8cc015dcc4099f0317d11ac2ae3550648966844243a296652c8639028 76712
ifd-gempc_1.0.7.orig.tar.gz
7b97702da19b32f39bc07a7b63d9d0647ec46848a195669a51e92c0594738515 12963
ifd-gempc_1.0.7-1.debian.tar.gz
e8a929b96ef1eda99e3850812a9151ab84980f79fbcafa89448a05a8573a4ee1 45226
libgempc410_1.0.7-1_amd64.deb
7b1622656947bba99cb50a56cf3254780c6026f89a7d562d98c9807f8865bd8b 40644
libgempc430_1.0.7-1_amd64.deb
Files:
a72d931dd91fff582113505a7d16271c 1208 libs extra ifd-gempc_1.0.7-1.dsc
b15a2ec0cace2523106aab140a38f3e1 76712 libs extra ifd-gempc_1.0.7.orig.tar.gz
1a4b0f74347229bf9d1cd2e31cb5f922 12963 libs extra
ifd-gempc_1.0.7-1.debian.tar.gz
0c5d83f9784d89dbd8bb0746273d7d39 45226 libs extra libgempc410_1.0.7-1_amd64.deb
b96d29da8b48f84bd6913faa8f38465f 40644 libs extra libgempc430_1.0.7-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAk+CBYkACgkQP0qKj+B/HPm1kgCgh3cOdDCX6z86+xcThXL/mQOl
UokAoITnA3Dx8dxCgZiT2hnakGI2HBIe
=bw7S
-----END PGP SIGNATURE-----
--- End Message ---
