Package: squidguard
Version: 1.5-2+b1
Severity: important
Tags: patch
User: hardening-disc...@lists.alioth.debian.org
Usertags: goal-hardening

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

Please find attached a patch that enable hardening build flags in your
package. The upstream test suite run after the build confirm the good
execution of the binary.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=M/jO
-----END PGP SIGNATURE-----
diff -Nru squidguard-1.5/debian/changelog squidguard-1.5/debian/changelog
--- squidguard-1.5/debian/changelog	2014-01-24 21:52:43.000000000 +0100
+++ squidguard-1.5/debian/changelog	2014-09-07 11:22:24.000000000 +0200
@@ -1,3 +1,10 @@
+squidguard (1.5-2.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Pass hardened flags through dpkg-buildflags to configure
+
+ -- Guillaume Delacour <g...@iroqwa.org>  Sun, 07 Sep 2014 11:21:46 +0200
+
 squidguard (1.5-2) unstable; urgency=low
 
   * Fix small typo in update-squidguard.
diff -Nru squidguard-1.5/debian/rules squidguard-1.5/debian/rules
--- squidguard-1.5/debian/rules	2014-09-07 11:21:09.000000000 +0200
+++ squidguard-1.5/debian/rules	2014-09-07 11:22:54.000000000 +0200
@@ -1,11 +1,14 @@
 #!/usr/bin/make -f
 # -*- makefile -*-
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
 %:
 	dh $@
 
 override_dh_auto_configure: 
-	dh_auto_configure  -- --with-db=/usr \
+	dh_auto_configure  -- $(shell dpkg-buildflags --export=configure) \
+		--with-db=/usr \
 		--with-ldap=yes --with-ldap-lib=/usr/lib \
 		--with-sg-config=/etc/squidguard/squidGuard.conf \
 		--with-sg-logdir=/var/log/squidguard \

Reply via email to