Package: qemu-kvm
Version: 1.0+dfsg-5
Severity: important
Tags: patch
Please enable hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides noopt from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur qemu-kvm-1.0+dfsg.harden/debian/rules qemu-kvm-1.0+dfsg/debian/rules
--- qemu-kvm-1.0+dfsg.harden/debian/rules 2012-01-26 21:41:14.0 +0100
+++ qemu-kvm-1.0+dfsg/debian/rules 2012-01-29 14:37:20.0 +0100
@@ -47,13 +47,11 @@
QEMU_EXE = $(QEMU_TAEGET)/qemu-system-ppcemb
endif
-CFLAGS = -Wall -g
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
NUMJOBS = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
MAKEFLAGS += -j$(NUMJOBS)
@@ -73,6 +71,8 @@
--audio-card-list=ac97 es1370 sb16 cs4231a adlib gus hda \
--disable-strip \
--disable-xen \
+ --extra-cflags=${CFLAGS} \
+ --extra-ldflags=${LDFLAGS} \
--disable-blobs \
--disable-guest-agent \
--disable-smartcard-nss --disable-smartcard \
Nur in qemu-kvm-1.0+dfsg/debian/: rules~.
