[pkg-lighttpd] Bug#654151: Please enabled hardened build flags

Arno Töll debian at toell.net
Mon Jan 2 12:47:44 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Moritz,

On 02.01.2012 03:17, Moritz Muehlenhoff wrote:
> Package: lighttpd
> Version: 1.4.30-1
> Severity: important
> 
> I've tested in a local build that this is sufficient to enable
> hardened build flags.

we already enabled hardening build flags for the most recent upload to
unstable. 1.4.30-1 [1] enabled hardening flags through the
dpkg-buildflags mechanism and the most recent build log [2] shows they
are used too.

Thus, I am closing the bug.
	
As an unrelated note, I think you shouldn't be advocating compat 9
unless that mode is really frozen and finalized. There are other ways to
enable hardening flags easily for autoconf based build systems like we
do despite of using compat 8.

[1] http://lists.debian.org/debian-devel-changes/2011/12/msg01891.html
[2]
https://buildd.debian.org/status/fetch.php?pkg=lighttpd&arch=i386&ver=1.4.30-1&stamp=1324416023

- -- 
with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPAadwAAoJEMcrUe6dgPNt9zkP/iiJHTHtRyd9VghCWVvRS5nb
+9u1af9M5zOEtErA4KvTKgmHJS9p61AIetPA+ijKgxy9QoMi9jbR15zUMPPEyON0
6lsw8Zaze8XHqRXD9ZQ4yHmY7uGBqnFiaJyfRgdWvE+74523eveiDqySSrGIBQ7o
dSwPjcq4OJs6jRhMiCRb69w8GN3rymY4zW/wnkW8q/XCFddRuiqtjRhdTv7wmCHU
c3oEuBqqdQmwUfDBzr+VCBEfuzPk4KkAz16SP2AIX6S95LTqsbbkHE9UzjhZPRAM
HlHZSLVvKU0PW3uWFs1VwYVXUsftygxXmA8R/nKiK791yWF35ASQscT2dTENveYu
Gb47QHGAqFr49Qem2+0jpQ4Xo5/1i+jL/iu7AMUjn6/EsIoYEyH8BieTTd58s9+g
KJhkf+hnO/8mg3vreWawUrBFDFpoprsLV4pv6i8Dzz7ce3lwtZrk7H8+V71JAUzo
On7V7gFtKZ7Wd80VcdojpOvAPIl8CXeFdhoSVl+MJzvCc75/QDZ+XeOh/9jWmhl1
BFeT2ZU9e66iAscu8jftBP9UfO+JiKdBQjYpZUSLU4ImbLKq+/0twGPEQEB8shSR
/MVOgCokoWldF5RR+AwlHtldR8KVVEy1znfXpJAatCm/aMAF9CH6v/iwqiKXBgt3
W+1jmTl6nX/tFGeyO3Mw
=zR27
-----END PGP SIGNATURE-----





More information about the pkg-lighttpd-maintainers mailing list