Package: cpio
Version: 2.11-7
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
diff -aur cpio-2.11.orig/debian/rules cpio-2.11/debian/rules
--- cpio-2.11.orig/debian/rules	2010-12-16 10:15:46.000000000 +0100
+++ cpio-2.11/debian/rules	2012-01-03 23:00:10.000000000 +0100
@@ -17,12 +17,6 @@
 CROSS= --build $(DEB_BUILD_GNU_TYPE)
 endif
 
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS += -O0
-else
-CFLAGS += -O2
-endif
-
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
 INSTALL_PROGRAM += -s
 endif
@@ -30,7 +24,7 @@
 obj/Makefile:
 	$(checkdir)
 	mkdir -p obj
-	cd obj && CFLAGS='$(CFLAGS)' CPIO_MT_PROG=mt ../configure --prefix=/usr $(CROSS) \
+	cd obj && CPIO_MT_PROG=mt ../configure $(shell dpkg-buildflags --export=configure) --prefix=/usr $(CROSS) \
 	       --mandir=/usr/share/man \
 	       --infodir=/usr/share/info \
 	       --bindir=/bin \

Reply via email to