Package: iproute Version: 20120319-1 Severity: important Tags: patch Please enable hardened build flags through dpkg-buildflags.See http://lists.debian.org/debian-devel-announce/2012/02/msg00016.html for details.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritz
diff -aur iproute-20120319.orig/Makefile iproute-20120319/Makefile --- iproute-20120319.orig/Makefile 2012-03-20 01:27:12.000000000 +0100 +++ iproute-20120319/Makefile 2012-05-14 01:12:05.000000000 +0200 @@ -18,7 +18,7 @@ endif #options if you have a bind>=4.9.4 libresolv (or, maybe, glibc) -LDLIBS=-lresolv +LDLIBS=-lresolv `dpkg-buildflags --get LDFLAGS` ADDLIB= #options for decnet @@ -29,7 +29,7 @@ CC = gcc HOSTCC = gcc -CCOPTS = -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall +CCOPTS = `dpkg-buildflags --get CFLAGS` `dpkg-buildflags --get CPPFLAGS` -D_GNU_SOURCE -Wstrict-prototypes -Wall CFLAGS = $(CCOPTS) -I../include $(DEFINES) YACCFLAGS = -d -t -v Nur in iproute-20120319: Makefile~.