Your message dated Fri, 22 Jun 2012 11:02:10 +0000
with message-id <[email protected]>
and subject line Bug#655501: fixed in base-passwd 3.5.25
has caused the Debian Bug report #655501,
regarding Please enabled hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
655501: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655501
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: base-passwd
Version: 3.5.24
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
--- base-passwd-3.5.24.orig/debian/rules 2011-07-16 13:42:25.000000000 +0200
+++ base-passwd-3.5.24/debian/rules 2012-01-11 19:27:51.000000000 +0100
@@ -39,14 +39,13 @@
$(MAKE) -C man clean
rm -rf debian/tmp debian/files debian/substvars
-ifeq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS := -g -O2 -Wall
-else
-CFLAGS := -g -Wall
-endif
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
Makefile: Makefile.in configure.ac
- CFLAGS="$(CFLAGS)" ./configure $(confflags)
+ CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure $(confflags)
.PHONY: binary
binary: binary-arch binary-indep
--- End Message ---
--- Begin Message ---
Source: base-passwd
Source-Version: 3.5.25
We believe that the bug you reported is fixed in the latest version of
base-passwd, which is due to be installed in the Debian FTP archive:
base-passwd_3.5.25.dsc
to main/b/base-passwd/base-passwd_3.5.25.dsc
base-passwd_3.5.25.tar.gz
to main/b/base-passwd/base-passwd_3.5.25.tar.gz
base-passwd_3.5.25_i386.deb
to main/b/base-passwd/base-passwd_3.5.25_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Colin Watson <[email protected]> (supplier of updated base-passwd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 22 Jun 2012 11:40:25 +0100
Source: base-passwd
Binary: base-passwd
Architecture: source i386
Version: 3.5.25
Distribution: unstable
Urgency: low
Maintainer: Colin Watson <[email protected]>
Changed-By: Colin Watson <[email protected]>
Description:
base-passwd - Debian base system master password and group files
Closes: 650553 655501
Changes:
base-passwd (3.5.25) unstable; urgency=low
.
* users-and-groups: Document historical meaning of sys user/group (thanks
to Mantas M. for the tip).
* Use dpkg-buildflags to enable hardening options (based on a patch from
Moritz Muehlenhoff; closes: #655501).
* Update users-and-groups documentation of the sudo group to describe
current behaviour and mention pkexec (thanks, Luca Capello; closes:
#650553).
Checksums-Sha1:
abd36ffd81ab2d85e939cfde83c4b5b26161f334 1574 base-passwd_3.5.25.dsc
92e78d57d827cfdb5147c4483979732e50cd63c6 77728 base-passwd_3.5.25.tar.gz
c8fb82106d338cd6ab59ce292ccfe430b350a36b 46982 base-passwd_3.5.25_i386.deb
Checksums-Sha256:
6fb9649e1ecc86f2d09509da5444109422ac7aed71cc4cc95dd1001f859495ae 1574
base-passwd_3.5.25.dsc
fd7801cdf1fb22e5156ef333415a8564eb35f318ec13dd2ee21bc2dc27548ca6 77728
base-passwd_3.5.25.tar.gz
78f9f6ffa45128b5a2c7090e19908ba9078bac6846e421e891d4f0b3c0ad8893 46982
base-passwd_3.5.25_i386.deb
Files:
db02cba9b9a43e7e1af971defa41f14e 1574 admin required base-passwd_3.5.25.dsc
0c4fc54429a3d7feb5fb687535c5dc24 77728 admin required base-passwd_3.5.25.tar.gz
93da55b31dfc57a7c6fedd2c0d48d9f8 46982 admin required
base-passwd_3.5.25_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Colin Watson <[email protected]> -- Debian developer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=UPqD
-----END PGP SIGNATURE-----
--- End Message ---
