Bug#823967: libapache2-mod-perl2: hardening-no-relro mod_perl.so

Niko Tyni ntyni at debian.org
Tue May 10 19:44:07 UTC 2016


Package: libapache2-mod-perl2
Version: 2.0.9-4

As noticed by lintian, mod_perl.so is not linked with
-Wl,-z,relro.

W: libapache2-mod-perl2: hardening-no-relro usr/lib/apache2/modules/mod_perl.so

It looks like we're currently using the debhelper default behaviour where
linker flags are passed to Makefile.PL in an LD=[...] argument. This
normally works with ExtUtils::MakeMaker, but apparently not with the
libapache2-mod-perl2 build system.

I see Apache2::Build::ldopts uses

    my $ld = $self->perl_config('ld');

so that part probably needs some work. Filing this to track
the issue, but I'm not promising a patch any time soon...
-- 
Niko Tyni   ntyni at debian.org



More information about the pkg-perl-maintainers mailing list