Bug#678995: src:evince: please build with PIE and bindnow

[Michael Biebl]

On 25.06.2012 17:54, intrigeri at debian.org wrote:
> Source: evince
> Severity: normal
> Version: 3.4.0-2
> Tags: patch
> User: hardening-discuss at lists.alioth.debian.org
> Usertags: goal-hardening
> 
> Hi!
> 
> It's great that Evince is now built with a (limited) set of hardening
> build flags, thanks to CDBS. However, we can easily do better!
> 
> Please build Evince with PIE and bindnow,
> as implemented by the attached patch.

including /usr/share/dpkg/buildflags.mk
requires a versioned build-depends on dpkg-dev >= 1.16.1, right?


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20120626/235561f2/attachment.pgp>