Package: hplip Severity: important Tags: patch Please enable hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritz
diff -aur hplip-3.12.2.harden/debian/rules hplip-3.12.2/debian/rules --- hplip-3.12.2.harden/debian/rules 2012-04-06 21:28:34.000000000 +0200 +++ hplip-3.12.2/debian/rules 2012-04-06 21:34:56.000000000 +0200 @@ -65,15 +65,11 @@ CONFFLAGS += --disable-pp-build endif -DEBUGFLAGS=-g -ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) - DEBUGFLAGS += -O0 -else - DEBUGFLAGS += -O2 -endif - -CFLAGS:=-Wall -pipe $(DEBUGFLAGS) +CFLAGS:=-Wall -pipe +CFLAGS += `dpkg-buildflags --get CFLAGS` CXXFLAGS:=$(CFLAGS) +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` ## ## Build-tree preparation @@ -122,7 +118,7 @@ ln -sf /usr/share/misc/config.guess . rm -f config.cache - ./configure CFLAGS="$(CFLAGS)" CXXFLAGS="$(CXXFLAGS)" \ + ./configure CFLAGS="$(CFLAGS)" CXXFLAGS="$(CXXFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" \ HPLIP_PPD_PATH=/usr/share/ppd \ $(CONFFLAGS) \ --config-cache \ Nur in hplip-3.12.2/debian: rules~.