On Thu, Sep 01, 2016 at 05:17:06PM +0200, Moritz Muehlenhoff wrote: > I think we should remove hardening-wrapper for the stretch release? > dpkg-buildflags/dh > are around for a long time now and we're down to about 50 reverse > dependencies at > this point. Plus, lintian marks it as deprecated for quite a while now. > > Kees, what do you think?
Yeah, it (and hardening-includes) should get removed in favor of the dpkg-buildflags method. However, this means we need to move the "hardening-check" script from hardening-includes to lintian, probably. -Kees -- Kees Cook @debian.org