Package: wpasupplicant
Version: 1.0-3
Severity: wishlist
Tags: patch security


Hi,

Please consider the following patch to enable hardening options as
described on:
https://wiki.debian.org/Hardening

The patch works for me

Regards,
        Florent

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.8-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages wpasupplicant depends on:
ii  adduser           3.113+nmu3
ii  initscripts       2.88dsf-43
ii  libc6             2.17-93
ii  libdbus-1-3       1.6.14-1
ii  libncurses5       5.9+20130608-1
ii  libnl-3-200       3.2.21-1
ii  libnl-genl-3-200  3.2.21-1
ii  libpcsclite1      1.8.8-4+b1
ii  libreadline5      5.2+dfsg-2
ii  libssl1.0.0       1.0.1e-3
ii  libtinfo5         5.9+20130608-1
ii  lsb-base          4.1+Debian12

wpasupplicant recommends no packages.

Versions of packages wpasupplicant suggests:
pn  libengine-pkcs11-openssl  <none>
pn  wpagui                    <none>

--- /tmp/rules.old	2013-10-09 11:30:14.785568570 +0100
+++ debian/rules	2013-10-09 11:30:22.001174678 +0100
@@ -1,11 +1,14 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
+include /usr/share/dpkg/buildflags.mk
+
 # The build system doesn't use CPPFLAGS, pass them to CFLAGS/CXXFLAGS to
 # enable the missing (hardening) flags
 CFLAGS   += -MMD -Wall $(CPPFLAGS)
 CXXFLAGS += $(CPPFLAGS)
 
-UCFLAGS  = -MMD -Wall -g -Os
+UCFLAGS  = -MMD -Wall -g -Os -fPIC
 
 BINDIR   = /sbin
 V = 1

Reply via email to