Package: base-passwd
Version: 3.5.24
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
--- base-passwd-3.5.24.orig/debian/rules	2011-07-16 13:42:25.000000000 +0200
+++ base-passwd-3.5.24/debian/rules	2012-01-11 19:27:51.000000000 +0100
@@ -39,14 +39,13 @@
 	$(MAKE) -C man clean
 	rm -rf debian/tmp debian/files debian/substvars
 
-ifeq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS := -g -O2 -Wall
-else
-CFLAGS := -g -Wall
-endif
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
 
 Makefile: Makefile.in configure.ac
-	CFLAGS="$(CFLAGS)" ./configure $(confflags)
+	CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure $(confflags)
 
 .PHONY: binary
 binary: binary-arch binary-indep

Reply via email to