Source: llvm-toolchain-3.4 Severity: wishlist Hello,
LLVM and Clang are not using hardening flags during the build process. Lintian shows many warnings: W: libclang1-3.5: hardening-no-relro usr/lib/x86_64-linux-gnu/libclang-3.5.so.1 W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/bugpoint W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llc W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-ar W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-as W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-bcanalyzer W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-config W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-cov W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-diff W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-dis W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-dwarfdump W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-extract W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-link W: llvm-3.5: hardening-no-relro usr/lib/llvm-3.5/bin/llvm-mc The idea would be enable them: https://wiki.debian.org/Hardening And evaluate the impact on the unit tests (should be minimal). It should be pretty easy. Cheers, Sylvestre -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (900, 'testing'), (600, 'unstable'), (500, 'testing-updates'), (300, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
