Bug#823967: libapache2-mod-perl2: hardening-no-relro mod_perl.so

Niko Tyni ntyni at debian.org
Sat May 28 18:38:04 UTC 2016


On Sat, May 28, 2016 at 06:09:43PM +0000, Damyan Ivanov wrote:
> -=| Niko Tyni, 10.05.2016 22:44:07 +0300 |=-
> > Package: libapache2-mod-perl2
> > Version: 2.0.9-4
> > 
> > As noticed by lintian, mod_perl.so is not linked with
> > -Wl,-z,relro.
> > 
> > W: libapache2-mod-perl2: hardening-no-relro usr/lib/apache2/modules/mod_perl.so
> > 
> > It looks like we're currently using the debhelper default behaviour where
> > linker flags are passed to Makefile.PL in an LD=[...] argument. This
> > normally works with ExtUtils::MakeMaker, but apparently not with the
> > libapache2-mod-perl2 build system.

> The following patch seems to fix this. Is it too crude?

> +    $ldopts .= " $ENV{LDFLAGS}" if exists $ENV{LDFLAGS};

Oh, that easy!

Fine by me, and seems like it might even have a chance upstream.

Thanks for looking at this,
-- 
Niko



More information about the pkg-perl-maintainers mailing list