Re: Really enable -fstack-clash-protection on armhf/armel?

2023-11-27 Thread Moritz Muehlenhoff
On Fri, Nov 24, 2023 at 01:34:21AM +0100, Guillem Jover wrote: > > Is that a feature that the Debian ARM32 porters and the security team really > > want to support actively, despite the missing upstream support? > > According to https://bugs.debian.org/918914#73 there were no pending > toolchain

Re: [RFC PATCH] dpkg-buildflags: Switch to -fstack-protector-strong

2014-06-27 Thread Moritz Muehlenhoff
On Wed, Jun 25, 2014 at 07:29:09PM -0400, Michael Gilbert wrote: On Tue, Jun 24, 2014 at 10:11 AM, Kees Cook wrote: On Tue, Jun 24, 2014 at 11:29:31AM +0200, Romain Francoise wrote: Hi, GCC 4.9 supports a new stack protector implementation, enabled via the -fstack-protector-strong flag,

Re: [RFC PATCH] dpkg-buildflags: Switch to -fstack-protector-strong

2014-06-24 Thread Moritz Muehlenhoff
On Tue, Jun 24, 2014 at 07:11:58AM -0700, Kees Cook wrote: Though really hardening-wrapper should be deprecated for Jessie. I looked into it, but the number of packages using -wrapper or -includes is too large to do this realistically. Rather for jessie+1. I think we need a lintian check to

Bug#738310: Add a hint to --include-removal to dpkg-source --commit

2014-02-08 Thread Moritz Muehlenhoff
Package: dpkg Version: 1.17.6 Severity: wishlist Tags: patch Running dpkg-source on a source directory with a removed file give the following error message: $ dpkg-source --commit dpkg-source: warning: ignoring deletion of file foo In some cases it might actually be useful to record the

Bug#653846: Please add an option for dpkg-buildflags to emit a different optimization level

2012-01-02 Thread Moritz Muehlenhoff
On Mon, Jan 02, 2012 at 01:50:47AM -0600, Jonathan Nieder wrote: Raphael Hertzog wrote: On Sat, 31 Dec 2011, Jonathan Nieder wrote: It's perhaps ugly, but DEB_CFLAGS_MAINT_APPEND=-Os works fine for me. Why would it be ugly? I think that's the correct interface to change the

Bug#653846: Please add an option for dpkg-buildflags to emit a different optimization level

2011-12-31 Thread Moritz Muehlenhoff
Package: dpkg-dev Version: 1.16.1.2 Severity: wishlist Hi Raphael, I've started to submit patches to enable hardened build flags. After having converted approx. 50 packages I've found the interface useful and convenient, thanks for implementing it! One recurring issue I found in many rules files

Bug#497041: Full disk results in corrupted /var/lib/dpkg/updates/ filled filled with #padding entries

2008-08-29 Thread Moritz Muehlenhoff
Package: dpkg Version: 1.14.20 Severity: normal I did an installation of a package with many deps on a current Lenny, which resulted in the disk filling up completely. After having freed some diskspace I wanted to run dpkg --configure -a, which failed: lennytest:/home/jmm/foobar/swig1.3-1.3.33#

Bug#465282: Proposalto introduce compiler options passed from dpkg-buildpackage

2008-02-14 Thread Moritz Muehlenhoff
Loïc Minier wrote: On Thu, Feb 14, 2008, Frank Lichtenheld wrote: Hmm, I doubt that dpkg-dev should be the place to keep track of that. I mean, that probably depends on the version of gcc/g++/whatever used, so it's quite meaningless to make it dependent on the version of dpkg-dev you use.

Bug#465282: dpkg-dev: Set a set of compiler flags for a build

2008-02-13 Thread Moritz Muehlenhoff
On Tue, Feb 12, 2008 at 04:45:01PM +0100, Matthias Klose wrote: Frank Lichtenheld writes: On Mon, Feb 11, 2008 at 05:39:10PM +0100, Matthias Klose wrote: Content-Description: message body text Package: dpkg-dev Severity: wishlist Please find attached a patch which implements

Bug#465282: Proposalto introduce compiler options passed from dpkg-buildpackage

2008-02-13 Thread Moritz Muehlenhoff
On Mon, Feb 11, 2008 at 05:44:33PM +0100, Matthias Klose wrote: Moritz Muehlenhoff writes: [This message has also been posted to gmane.linux.debian.devel.general.] On 2007-12-25, Moritz Muehlenhoff [EMAIL PROTECTED] wrote: Matthias Klose wrote: This is a proposal to introduce a common