Le dimanche 07 septembre 2014 à 03:40 +0200, Guillaume Delacour a écrit : > Package: apt-cacher-ng > Version: 0.7.27-1 > Severity: important > Tags: patch > User: hardening-disc...@lists.alioth.debian.org > Usertags: goal-hardening > > Hello, > > Please find attached a patch that enable all hardening flags in your > package. > > Although apt-cacher-ng use dh/9, CPPFLAGS (fortify) was not enabled. > Besides since debhelper 0.9.20120417 handle the workaround appending > CPPFLAGS to CXXFLAGS, i still had to do (i've not investigated though). > I've also enabled the optionals pie and bindnow.
debhelper must handle the situation (/usr/share/perl5/Debian/Debhelper/Buildsystem/cmake.pm, sub configure) and enable verbose compiler command lines, there is a problem somewhere (due to package or in debhelper itself). As it concerns some other packages, i'll take a look and report back. > > After the build i've made some tests (apt-get update && apt-get install > $package through apt-cacher-ng) which confirm that it won't break > anything (at least at first glance). > > Finally, i've made the build verbose to let blhc see if all flags are > enabled in the future. > > -- Guillaume Delacour <g...@iroqwa.org>
signature.asc
Description: This is a digitally signed message part
