[Pkg-nagios-devel] Bug#656866: Bug#656866: Please enabled hardened build flags

[Moritz Muehlenhoff]

On Sun, Jan 22, 2012 at 09:24:09PM +0100, Alexander Wirt wrote:
> Moritz Muehlenhoff schrieb am Sunday, den 22. January 2012:
> 
> > Package: icinga
> > Version: 1.6.1-2
> > Severity: important
> > Tags: patch
> > 
> > Please enabled hardened build flags through dpkg-buildflags.
> > 
> > Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
> Why is that bug important? 

It's a release goal for Wheezy.

> Anyhow, does this dpkg-buildflags thing work with
> squeeze? Building the package should work with stable without any problems,
> as I am doing autobuilds for several distributions.

Yes, dpkg-buildflags already exists in Squeeze, but the hardening flags
are not exported (which should be okay for an update):

# dpkg-buildflags --get CFLAGS
-g -O2
# dpkg-buildflags --get CPPFLAGS

# dpkg-buildflags --get LDFLAGS

Cheers,
        Moritz