Package: xinetd
Version: 1:2.3.14-7
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu karmic ubuntu-patch

Hello!

Since xinetd listens on external ports, I think it might benefit
from having hardening[1] enabled for its build.  The attached patch
implements this.

Thanks!

-Kees

[1] http://wiki.debian.org/Hardening

-- 
Kees Cook                                            @debian.org
diff -uNrp xinetd-2.3.14~/debian/control xinetd-2.3.14/debian/control
--- xinetd-2.3.14~/debian/control	2009-08-17 12:04:15.917773457 -0700
+++ xinetd-2.3.14/debian/control	2009-08-20 17:39:49.000000000 -0700
@@ -4,6 +4,6 @@ Priority: extra
 Maintainer: Pierre Habouzit <madco...@debian.org>
 Standards-Version: 3.7.3
-Build-Depends: debhelper (>> 5.0.0), libwrap0-dev, autotools-dev, lsb-base
+Build-Depends: debhelper (>> 5.0.0), libwrap0-dev, autotools-dev, lsb-base, hardening-wrapper
 Vcs-Git: git://git.madism.org/packages/xinetd.git
 Vcs-Browser: http://git.madism.org/?p=packages/xinetd.git
 Homepage: http://www.xinetd.org
diff -uNrp xinetd-2.3.14~/debian/rules xinetd-2.3.14/debian/rules
--- xinetd-2.3.14~/debian/rules	2009-08-17 12:04:15.000000000 -0700
+++ xinetd-2.3.14/debian/rules	2009-08-20 17:39:59.000000000 -0700
@@ -1,4 +1,5 @@
 #!/usr/bin/make -f
+export DEB_BUILD_HARDENING=1
 
 CFLAGS=-Wall -Wextra -g $(if $(findstring noopt,$(DEB_BUILD_OPTIONS)),-O0,-O2)
 tmp = $(CURDIR)/debian/xinetd

Reply via email to