On Tue, Mar 18, 2014 at 12:03:08AM +0100, Simon Ruderich wrote:
> Hello Jonas,
>
> Any news on this? It would be great if this patch could get
> included into cdbs to provide the additional hardening flags for
> other packages.
Hello Jonas,
Any news? I saw a new version of cdbs was released, but
On Sun, Jan 19, 2014 at 08:50:14PM +0100, Jonas Smedegaard wrote:
> Thanks a lot, both for the explanation and the patch.
>
> I appen to have my head deep into cdbs these days, and will apply the
> patch right now - expected to be released later tonight or tomorrow.
Hello Jonas,
Any news on this?
Quoting Simon Ruderich (2014-01-19 18:42:47)
> Raising severity because this causes missing hardening flags for
> packages (e.g. shadow and therefore no PIE for setuid su) when the
> maintainer uses the DEB_* (which includes DEB_BUILD_MAINT_OPTIONS)
> approach documented in dpkg-buildflags to ad
severity 712729 important
tags 712729 patch
thanks
Hello,
Raising severity because this causes missing hardening flags for
packages (e.g. shadow and therefore no PIE for setuid su) when
the maintainer uses the DEB_* (which includes
DEB_BUILD_MAINT_OPTIONS) approach documented in dpkg-buildflags
t
Quoting Emilio Pozuelo Monfort (2013-06-20 10:18:26)
> On 20/06/13 09:57, Jonas Smedegaard wrote:
> > Quoting Emilio Pozuelo Monfort (2013-06-20 00:29:14)
> >> On 19/06/13 19:14, Jonas Smedegaard wrote:
> >>> Quoting Emilio Pozuelo Monfort (2013-06-19 11:29:55)
> Or
>
> DEB_LDFLAGS_M
On 20/06/13 09:57, Jonas Smedegaard wrote:
> Quoting Emilio Pozuelo Monfort (2013-06-20 00:29:14)
>> On 19/06/13 19:14, Jonas Smedegaard wrote:
>>> Quoting Emilio Pozuelo Monfort (2013-06-19 11:29:55)
Or
DEB_LDFLAGS_MAINT_APPEND = -Wl,-O1 -Wl,--as-needed
and get my package
Quoting Emilio Pozuelo Monfort (2013-06-20 00:29:14)
> On 19/06/13 19:14, Jonas Smedegaard wrote:
> > Quoting Emilio Pozuelo Monfort (2013-06-19 11:29:55)
> >> Or
> >>
> >> DEB_LDFLAGS_MAINT_APPEND = -Wl,-O1 -Wl,--as-needed
> >>
> >> and get my package built with LDFLAGS="dpkg build flags plus my
On 19/06/13 19:14, Jonas Smedegaard wrote:
> Quoting Emilio Pozuelo Monfort (2013-06-19 11:29:55)
>> Currently if you use CDBS' autotools.mk, gnome.mk, cmake.mk or similar
>> and you don't mess with CFLAGS, LDFLAGS, CPPFLAGS... then you will get
>> dpkg-buildflags' default CFLAGS, LDFLAGS... auto
Quoting Emilio Pozuelo Monfort (2013-06-19 11:29:55)
> Currently if you use CDBS' autotools.mk, gnome.mk, cmake.mk or similar
> and you don't mess with CFLAGS, LDFLAGS, CPPFLAGS... then you will get
> dpkg-buildflags' default CFLAGS, LDFLAGS... automatically. Which is
> great.
>
> However many
On 19/06/13 00:57, Jonas Smedegaard wrote:
> Quoting Emilio Pozuelo Monfort (2013-06-18 23:41:47)
>> The hardening instructions in the Debian wiki[1] currently suggest to
>> include dpkg's buildflags.mk if the maintainer needs to
>> add/remove/override something, since CDBS doesn't support it (fo
Quoting Emilio Pozuelo Monfort (2013-06-18 23:41:47)
> The hardening instructions in the Debian wiki[1] currently suggest to
> include dpkg's buildflags.mk if the maintainer needs to
> add/remove/override something, since CDBS doesn't support it (for
> packages that don't need to change any *FLA
Package: cdbs
Version: 0.4.121
Severity: wishlist
Hi,
The hardening instructions in the Debian wiki[1] currently suggest to
include dpkg's buildflags.mk if the maintainer needs to add/remove/override
something, since CDBS doesn't support it (for packages that don't need
to change any *FLAGS, CDBS
12 matches
Mail list logo
