Source: xorg-server
Version: 2:21.1.7-1
Tags: security,patch

Dear Maintaner,

please enable full hardening flags for Xorg; in particular currently
the link feature BINDNOW[1] is missing.
As Xorg is a long running daemon any potential startup costs are negligible.


[1]: 
https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29


--- rules.bak   2023-02-26 17:19:55.678436715 +0100
+++ rules       2023-02-26 17:20:04.798284731 +0100
@@ -4,6 +4,8 @@

include /usr/share/dpkg/architecture.mk

+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
%:
       dh $@ --with quilt

Reply via email to