[Pkg-nagios-devel] Bug#656866: Bug#656866: Please enabled hardened build flags

[Moritz Mühlenhoff]

On Mon, Jan 23, 2012 at 06:18:40PM +0100, Moritz Muehlenhoff wrote:
> On Sun, Jan 22, 2012 at 09:24:09PM +0100, Alexander Wirt wrote:
> > Moritz Muehlenhoff schrieb am Sunday, den 22. January 2012:
> > 
> > > Package: icinga
> > > Version: 1.6.1-2
> > > Severity: important
> > > Tags: patch
> > > 
> > > Please enabled hardened build flags through dpkg-buildflags.
> > > 
> > > Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
> > Why is that bug important? 
> 
> It's a release goal for Wheezy.
> 
> > Anyhow, does this dpkg-buildflags thing work with
> > squeeze? Building the package should work with stable without any problems,
> > as I am doing autobuilds for several distributions.
> 
> Yes, dpkg-buildflags already exists in Squeeze, but the hardening flags
> are not exported (which should be okay for an update):
> 
> # dpkg-buildflags --get CFLAGS
> -g -O2
> # dpkg-buildflags --get CPPFLAGS
> 
> # dpkg-buildflags --get LDFLAGS

What's the status? Do you need more info? I'd like to get this in for Wheezy.

Cheers,
        Moritz