Source: zabbix
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
Nur in zabbix-1.8.9/debian: #rules#.
diff -aur zabbix-1.8.9.harden/debian/rules zabbix-1.8.9/debian/rules
--- zabbix-1.8.9.harden/debian/rules	2011-12-19 23:04:54.000000000 +0100
+++ zabbix-1.8.9/debian/rules	2012-01-21 18:02:34.000000000 +0100
@@ -64,13 +64,8 @@
 INSTALL_SCRIPT  = $(INSTALL) -p    -oroot -groot -m755
 INSTALL_DIR     = $(INSTALL) -p -d -oroot -groot -m755
 
-CFLAGS = -Wall -g
+DEB_CFLAGS_MAINT_APPEND=-Wall
 
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-    CFLAGS += -O0
-else
-    CFLAGS += -O2
-endif
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
     INSTALL_PROGRAM += -s
 endif
@@ -83,6 +78,7 @@
                     --prefix=/usr \
                     --mandir=\$${prefix}/share/man \
                     --infodir=\$${prefix}/share/info \
+                    $(shell dpkg-buildflags --export=configure) \
                     --enable-server \
                     --enable-agent \
                     --enable-proxy \
Nur in zabbix-1.8.9/debian: rules~.

Reply via email to