Hi!
On Sat, 2023-07-29 at 16:59:29 +0200, Martin Uecker wrote:
> are there any plans to add -fstack-clash-protection to
> the hardening flags?
See #918914.
Thanks,
Guillem
Hi all,
are there any plans to add -fstack-clash-protection to
the hardening flags?
Martin
On Tuesday 25 June 2013 09:47 PM, Nick Andrik wrote:
> Would it be that you need this?
>
> DPKG_EXPORT_BUILDFLAGS = 1
> include /usr/share/dpkg/buildflags.mk
>
> --
> =Do-
> N.AND
>
Don't know what was wrong. Maybe just the lack of sleep. Your suggestion
works. Thank you.
--
Ritesh Raj Sarraf |
On Tue, Jun 25, 2013 at 09:40:33PM +0530, Ritesh Raj Sarraf wrote:
> Following the Hardening wiki, I have build-dep the hardening-includes
> package and enabled the hardening flags as follows :
> If I bump the debhelper version to > 9, I do see the correct build flags.
So, why do
Or probably this section for older debhelper:
http://wiki.debian.org/HardeningWalkthrough#Older_debhelper
--
=Do-
N.AND
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:
http://lists.debian.o
Would it be that you need this?
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
--
=Do-
N.AND
2013/6/25 Ritesh Raj Sarraf :
> Hi,
>
> Following the Hardening wiki, I have build-dep the hardening-includes
> package and enabled the hardening flags as follows :
>
Hi,
Following the Hardening wiki, I have build-dep the hardening-includes
package and enabled the hardening flags as follows :
rrs@zan:/var/tmp/sg3-utils (build)$ cat debian/rules
#!/usr/bin/make -f
# debian/rules file for the sg3-utils package
# This has to be exported to make some magic below
Nick Andrik writes:
> Usually what I do is to copy the whole page and pass it through the
> blhc on my local system.
> In your case I get this message:
> NONVERBOSE BUILD: compiling remctl.c
> Your build logs include:
> make[4]: Entering directory
> `/build/buildd-remctl_3.4-2-amd64-evcdS_/remct
> That reminds me. Is there a way to get blhc to tell me *which* line in a
> build log makes it think that compiler flags are hidden?
I agree that would be really useful
> https://buildd.debian.org/~brlink/packages/r/remctl.html is reporting that
> the compiler flags are hidden. So far as I kno
Moritz Mühlenhoff writes:
> Agreed. I made a concentrated effort for Wheezy by submitting lots of
> patches for crucial packages and the general adoption among maintainers
> is increasing. Also, Simon Ruderich's blhc tool has been very useful and
> hardening checks are now also part of lintian.
10 matches
Mail list logo
