Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-05-30 Thread Stefan Fritsch
On Tuesday 29 May 2012, Arno Töll wrote: Note, a few packages of my 2.4 test rebuild FTBFS because of hardening flags lately (#666839 and #666854 at least). And these packages now probably turned RC buggy as they fail to build from source with hardening flags enabled. I will test that and

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-05-29 Thread Arno Töll
Hi, On 27.05.2012 12:02, Arno Töll wrote: I will come back to you on that once I know, but in principle we could certainly do so. Stefan just uploaded 2.2.22-6 to unstable which contains a backport of my apxs fixes. We consider this an experimental change but I think the overall compatibility

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-05-27 Thread Arno Töll
Hi Moritz, On 27.05.2012 11:53, Moritz Mühlenhoff wrote: I was about to run test builds now. Since the plan is to no longer go with 2.4 for Wheezy, will you backport the changes to 2.2 or is this for post-Wheezy? we are going to discuss things to backport to the Apache 2.2 package in the

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-05-27 Thread Moritz Mühlenhoff
On Mon, Apr 16, 2012 at 05:37:24PM +0200, Moritz Mühlenhoff wrote: On Sat, Apr 14, 2012 at 04:50:44PM +0200, Arno Töll wrote: On 14.04.2012 16:42, Moritz Mühlenhoff wrote: I can rebuild the Apache modules in the archive with test builds if that helps. I committed a fix to apxs in our

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-16 Thread Moritz Mühlenhoff
On Sat, Apr 14, 2012 at 04:50:44PM +0200, Arno Töll wrote: On 14.04.2012 16:42, Moritz Mühlenhoff wrote: I can rebuild the Apache modules in the archive with test builds if that helps. I committed a fix to apxs in our VCS yesterday [1]. This will allow you to override LDFLAGS just like it

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-14 Thread Arno Töll
On 14.04.2012 16:42, Moritz Mühlenhoff wrote: I can rebuild the Apache modules in the archive with test builds if that helps. I committed a fix to apxs in our VCS yesterday [1]. This will allow you to override LDFLAGS just like it is possible for CFLAGS. Moreover, this change automatically

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-14 Thread Moritz Mühlenhoff
On Mon, Apr 09, 2012 at 10:15:23PM +0200, Arno Töll wrote: Hi Moritz, On 08.04.2012 22:10, Moritz Muehlenhoff wrote: Hi, I'm working on hardened build flags for Squeeze and I'm looking into how to pass hardened build flags to Apache modules. Perhaps we should add hardening flags to

Re: Passing LDFLAGS to Apache modules for hardened build flags

2012-04-09 Thread Arno Töll
Hi Moritz, On 08.04.2012 22:10, Moritz Muehlenhoff wrote: Hi, I'm working on hardened build flags for Squeeze and I'm looking into how to pass hardened build flags to Apache modules. Perhaps we should add hardening flags to config_vars.mk which is where apxs gets defaults from. However,

Passing LDFLAGS to Apache modules for hardened build flags

2012-04-08 Thread Moritz Muehlenhoff
Hi, I'm working on hardened build flags for Squeeze and I'm looking into how to pass hardened build flags to Apache modules. According to the apxs2 manpage the following should work: APACHE_CFLAGS = `dpkg-buildflags --get CFLAGS` APACHE_CFLAGS += `dpkg-buildflags --get CPPFLAGS` APACHE_LDFLAGS