Package: gnome-control-center
Version: 1:2.30.1-1
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu natty ubuntu-patch
Hi,
In Ubuntu, the attached patch was applied to achieve the following:
* debian/{control{,.in},rules}: enable PIE build for security hardening
of font thumbnailer.
The goal is to make the font thumbnailer more resistant to potential attack
from 3rd party fonts that may contain intentionally malicious corruption, etc.
Thanks for considering the patch.
-Kees
-- System Information:
Debian Release: squeeze/sid
APT prefers natty
APT policy: (500, 'natty')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.38-3-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -u gnome-control-center-2.32.1/debian/control gnome-control-center-2.32.1/debian/control
--- gnome-control-center-2.32.1/debian/control
+++ gnome-control-center-2.32.1/debian/control
@@ -11,6 +11,7 @@
Uploaders: Debian GNOME Maintainers <pkg-gnome-maintain...@lists.alioth.debian.org>
Standards-Version: 3.8.3
Build-Depends: cdbs (>= 0.4.41),
+ hardening-wrapper,
gnome-pkg-tools (>= 0.10),
gnome-common,
quilt,
diff -u gnome-control-center-2.32.1/debian/control.in gnome-control-center-2.32.1/debian/control.in
--- gnome-control-center-2.32.1/debian/control.in
+++ gnome-control-center-2.32.1/debian/control.in
@@ -6,6 +6,7 @@
Uploaders: @GNOME_TEAM@
Standards-Version: 3.8.3
Build-Depends: cdbs (>= 0.4.41),
+ hardening-wrapper,
gnome-pkg-tools (>= 0.10),
gnome-common,
quilt,
diff -u gnome-control-center-2.32.1/debian/rules gnome-control-center-2.32.1/debian/rules
--- gnome-control-center-2.32.1/debian/rules
+++ gnome-control-center-2.32.1/debian/rules
@@ -1,5 +1,7 @@
#!/usr/bin/make -f
+export DEB_BUILD_HARDENING=1
+
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/rules/patchsys-quilt.mk
include /usr/share/cdbs/1/rules/utils.mk
diff -u gnome-control-center-2.32.1/debian/changelog gnome-control-center-2.32.1/debian/changelog
