Fyi, on 11.10 we have: $ hardening-check /usr/sbin/asterisk /usr/sbin/asterisk: Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes Read-only relocations: yes Immediate binding: yes
** Description changed: On 12.10 asterisk is not compiled with PIE or BIND_NOW. I didn't investigate, but this looks like in 12.04 this was dropped in favor of Debian's packaging: * Changes dropped from Ubuntu delta as no longer applicable: ... - debian/control: Build-depend on hardening-wrapper, now handled by dpkg-buildflags - debian/rules: Make use of hardening-wrapper - Please reenable PIE and BIND_NOW. This needs to be done for 12.04. + Please reenable PIE and BIND_NOW. This needs to be done for 12.04 too. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to asterisk in Ubuntu. https://bugs.launchpad.net/bugs/1039542 Title: Please re-enable PIE and BIND_NOW To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/1039542/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
