Thanks Jackub, I used before and the package is clean. So, in this case, not needed any extra hardening. But I agree with you and I will use/recommend 'export DEB_BUILD_MAINT_OPTIONS = hardening=+all' when needed.
Cheers, Eriberto 2014-08-06 17:22 GMT-03:00 Jakub Wilk <jw...@debian.org>: > * Eriberto <eribe...@eriberto.pro.br>, 2014-08-06, 16:05: > >>> Is then >>> >>> export DEB_BUILD_MAINT_OPTIONS = hardening=+all >>> >>> or >>> >>> export DEB_BUILD_MAINT_OPTIONS = hardening=+all >>> DPKG_EXPORT_BUILDFLAGS = 1 >>> include /usr/share/dpkg/buildflags.mk >>> >>> requested? >>> >> >> Not needed. Debhelper 9 do it automatically. > > > FWIW, debhelper itself doesn't enable all the hardening features, only the > default ones. If you wanted to enable everything, you'd still need: > > export DEB_BUILD_MAINT_OPTIONS = hardening=+all > > >> You will see no lintian notices about hardening. > > > Lintian hardening checks are not very reliable. > I recommend using blhc(1), which is more robust. > > -- > Jakub Wilk > > > -- > To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact > listmas...@lists.debian.org > Archive: https://lists.debian.org/20140806202208.ga2...@jwilk.net > -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
