Source: suphp Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags.
Patch attached. Cheers, Moritz
diff -aur suphp-0.7.1.orig/debian/rules suphp-0.7.1/debian/rules --- suphp-0.7.1.orig/debian/rules 2012-01-10 23:52:41.000000000 +0100 +++ suphp-0.7.1/debian/rules 2012-01-10 23:53:55.000000000 +0100 @@ -11,19 +11,22 @@ DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) -ifneq (,$(findstring debug,$(DEB_BUILD_OPTIONS))) - CFLAGS += -g -endif ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALL_PROGRAM += -s endif +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += `pkg-config --cflags apr-1` +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` + + patch: dpatch apply-all configure-apache2: patch dh_testdir - CPPFLAGS="`pkg-config --cflags apr-1`" ./configure --prefix=/usr \ + CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure --prefix=/usr \ --sysconfdir=/etc/suphp \ --with-apxs=/usr/bin/apxs2 \ --with-apache-user=www-data \ Nur in suphp-0.7.1/debian: rules~.