Package: squidguard Version: 1.5-2+b1 Severity: important Tags: patch User: hardening-disc...@lists.alioth.debian.org Usertags: goal-hardening
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello, Please find attached a patch that enable hardening build flags in your package. The upstream test suite run after the build confirm the good execution of the binary. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUDDGnAAoJEJmGUYuaqqClURsP+gMD8tb1Et4Lfq28++EFMXcK blclzUZAQpaNvjxMEeMEJ9QIUEM4oXcW+EvVdku5ir+CdANBXb00ESmeoqzRnjOC u/fVcLjrzo4CgaN4nYLWPmVyNz0HGVbuayd6JDoPoHI8I5scGEuVMp0w+TRU8xTB vwIcZl4H2kyCsiN18oWyD7n/lo1MHFByG2rJ1NIoIDtLm8K4RQAOJr0Lt9D9wsHA FsHfJSXc6JDPzQ1B++tXqbYU+UbOk8BUB+ZDyowPco3dhv/tEOXeCwy2uNjNSTZY DsCE3CP9mp5Zg0Z3U7oiwhQHFm0159BRv0PED9QL5zYfeVKmG6lhtnXF3g3LIJD/ 4LGamn+Ub/6beph3GM7gpo9s/cJhOEmctKabNBwJZXVGT/NThqoDs6qwgIQohcGm 6W2Ma3Uyl81MboyGFAW/e06fTJGYOa89qpmKDDua/0MG2xJZMlFXu6bRLeQnVF9P 7coN/j5VVbLcP6k1XY8AV5N9RJUxq/aWhEXFXjB7jV7axgM8dWUfLvNKFFc/j4aZ xUd3fWyWr/HXVf7mRXikvXeMpfQp+wT4+QYoU8ywFIrDUF8MS/SaGHkdOZkQ91Dd mcDX0ZU/aZAgoLf/lD9Keu9kggq9yhkzLESQVcxuHYQLht0HuR3BQyYLcSIf60HZ Cns45Y69IiNoX5KR24J3 =M/jO -----END PGP SIGNATURE-----
diff -Nru squidguard-1.5/debian/changelog squidguard-1.5/debian/changelog --- squidguard-1.5/debian/changelog 2014-01-24 21:52:43.000000000 +0100 +++ squidguard-1.5/debian/changelog 2014-09-07 11:22:24.000000000 +0200 @@ -1,3 +1,10 @@ +squidguard (1.5-2.1) unstable; urgency=medium + + * Non-maintainer upload. + * Pass hardened flags through dpkg-buildflags to configure + + -- Guillaume Delacour <g...@iroqwa.org> Sun, 07 Sep 2014 11:21:46 +0200 + squidguard (1.5-2) unstable; urgency=low * Fix small typo in update-squidguard. diff -Nru squidguard-1.5/debian/rules squidguard-1.5/debian/rules --- squidguard-1.5/debian/rules 2014-09-07 11:21:09.000000000 +0200 +++ squidguard-1.5/debian/rules 2014-09-07 11:22:54.000000000 +0200 @@ -1,11 +1,14 @@ #!/usr/bin/make -f # -*- makefile -*- +export DEB_BUILD_MAINT_OPTIONS = hardening=+all + %: dh $@ override_dh_auto_configure: - dh_auto_configure -- --with-db=/usr \ + dh_auto_configure -- $(shell dpkg-buildflags --export=configure) \ + --with-db=/usr \ --with-ldap=yes --with-ldap-lib=/usr/lib \ --with-sg-config=/etc/squidguard/squidGuard.conf \ --with-sg-logdir=/var/log/squidguard \