[Pkg-nagios-devel] Bug#656866: Bug#656866: Please enabled hardened build flags

[Alexander Wirt]

Moritz Mühlenhoff schrieb am Friday, den 06. April 2012:

> On Mon, Jan 23, 2012 at 06:18:40PM +0100, Moritz Muehlenhoff wrote:
> > On Sun, Jan 22, 2012 at 09:24:09PM +0100, Alexander Wirt wrote:
> > > Moritz Muehlenhoff schrieb am Sunday, den 22. January 2012:
> > > 
> > > > Package: icinga
> > > > Version: 1.6.1-2
> > > > Severity: important
> > > > Tags: patch
> > > > 
> > > > Please enabled hardened build flags through dpkg-buildflags.
> > > > 
> > > > Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
> > > Why is that bug important? 
> > 
> > It's a release goal for Wheezy.
> > 
> > > Anyhow, does this dpkg-buildflags thing work with
> > > squeeze? Building the package should work with stable without any problems,
> > > as I am doing autobuilds for several distributions.
> > 
> > Yes, dpkg-buildflags already exists in Squeeze, but the hardening flags
> > are not exported (which should be okay for an update):
> > 
> > # dpkg-buildflags --get CFLAGS
> > -g -O2
> > # dpkg-buildflags --get CPPFLAGS
> > 
> > # dpkg-buildflags --get LDFLAGS
> 
> What's the status? Do you need more info? I'd like to get this in for Wheezy.
This is done in my repo, I just need to upload which should happen over
easter.

Alex