Bug#678995: src:evince: please build with PIE and bindnow

[intrigeri at debian.org]

Source: evince
Severity: normal
Version: 3.4.0-2
Tags: patch
User: hardening-discuss at lists.alioth.debian.org
Usertags: goal-hardening

Hi!

It's great that Evince is now built with a (limited) set of hardening
build flags, thanks to CDBS. However, we can easily do better!

Please build Evince with PIE and bindnow,
as implemented by the attached patch.

(FWIW, Ubuntu has been building Evince with these options enabled since
10.04 LTS included.)

Thank you for maintaining Evince in Debian.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: evince_pie_and_bindnow_v0.patch
Type: text/x-diff
Size: 468 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20120625/cb457def/attachment.patch>