Source: zabbix Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritz
Nur in zabbix-1.8.9/debian: #rules#. diff -aur zabbix-1.8.9.harden/debian/rules zabbix-1.8.9/debian/rules --- zabbix-1.8.9.harden/debian/rules 2011-12-19 23:04:54.000000000 +0100 +++ zabbix-1.8.9/debian/rules 2012-01-21 18:02:34.000000000 +0100 @@ -64,13 +64,8 @@ INSTALL_SCRIPT = $(INSTALL) -p -oroot -groot -m755 INSTALL_DIR = $(INSTALL) -p -d -oroot -groot -m755 -CFLAGS = -Wall -g +DEB_CFLAGS_MAINT_APPEND=-Wall -ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) - CFLAGS += -O0 -else - CFLAGS += -O2 -endif ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALL_PROGRAM += -s endif @@ -83,6 +78,7 @@ --prefix=/usr \ --mandir=\$${prefix}/share/man \ --infodir=\$${prefix}/share/info \ + $(shell dpkg-buildflags --export=configure) \ --enable-server \ --enable-agent \ --enable-proxy \ Nur in zabbix-1.8.9/debian: rules~.