Source: coreutils
Version: 9.1-1
Tags: patch

The coreutils are currently build with the BINDNOW hardening feature missing.
From b25f20eab82d7544fb9c09b806a1b9e518bc99de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20G=C3=B6ttsche?=
 <Christian Göttsche cgzo...@googlemail.com>
Date: Sun, 6 Nov 2022 17:16:16 +0100
Subject: [PATCH] d/rules: enable all hardening flags

In particular the BINDNOW linker flag is current missing.
---
 debian/rules | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/rules b/debian/rules
index ddb98cb..db2dbdb 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,7 @@
 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/default.mk
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 DEB_CFLAGS_MAINT_APPEND = -DSYSLOG_SUCCESS -DSYSLOG_FAILURE -DSYSLOG_NON_ROOT
 
 # Renesas SH(sh4) need -mieee option.
-- 
2.38.1

Reply via email to