It seems that even though only `export DEB_BUILD_MAINT_OPTIONS =
hardening=+bindnow` is used in d/rules, the build runs with all
hardening flags [1].
Also can not spot any missing parts via checksec on the binary/process.
$ checksec --file=/sbin/agetty
RELRO STACK CANARY NX
Control: tags -1 + moreinfo
Hello,
On Tue, Oct 24, 2017 at 10:13:27AM +0200, Christian Göttsche wrote:
> Package: util-linux
> Version: 2.30.2-0.1
> Tags: patch security
>
> Please activate full hardening flags for the agetty binary, e.g. use
> `export DEB_BUILD_MAINT_OPTIONS = hardening=+all`.
Package: util-linux
Version: 2.30.2-0.1
Tags: patch security
Please activate full hardening flags for the agetty binary, e.g. use
`export DEB_BUILD_MAINT_OPTIONS = hardening=+all`.
3 matches
Mail list logo