On Sat, May 12, 2012 at 05:26:59PM +0200, Marc Haber wrote: > I have patched the package to actually use the system PolarSSL from
Perfect, that's the best solution. > the Debian packages, but the output of your hardening-check > command line didn't change at all. Yes. The output of hardening-check is correct (and was before), I only posted it for reference. hardening-check only checks the resulting binaries, so the missing flags from PolarSSL - which affect only a few source files - are not detected. > blhc-0.02 pdns_3.1-1_amd64.build doesn't give any output though. That's good, so no flags are missing. Exactly like it should be. > Am I fine now, or is there something I can do? You're fine. hardening-check doesn't report any missing features (except the ones which weren't enabled) and blhc reports no missing flags. Thanks for fixing the hardening issue so quickly. Regards, Simon -- + Privatsphäre ist notwendig + Ich verwende GnuPG http://gnupg.org + Öffentlicher Schlüssel: 0x92FEFDB7E44C32F9
pgpKHNwud7JAM.pgp
Description: PGP signature