[Pkg-shadow-devel] Bug#836653: shadow: please drop the build dependency on hardening-wrapper

[Mattia Rizzolo]

On Sun, Sep 04, 2016 at 01:16:54PM +0000, Matthias Klose wrote:
> This package builds using the hardening-wrapper package, which
> is now replaced by dpkg-dev's DEB_BUILD_MAINT_OPTIONS settings.
> 
> Please consider dropping the build dependency of hardening-wrapper
> and use the DEB_BUILD_MAINT_OPTIONS settings.

This is particularly annoying for shadow, as it is part of the essential
set, and it is currently not buildable (hardening-wrapper can't atm be
coinstalled with current binutils), breaking a set of QA jobs that
builds the essential set, and messing with statistics.

I don't think shadow really need hardening-wrapper at all.  The build
system is a regular autoconf/autotools which respects CFLAGS.

The compat level is 6, so dh_auto_* won't export them, but you could
instead set DPKG_EXPORT_BUILDFLAGS and include
/usr/share/dpkg/buildflags.mk to get them (you need to do so *after* the
already presetn 'export DEB_BUILD_MAINT_OPTIONS = hardening=+all').



BTW, Serge: you have staged a bunch of stuff in git already, can we have
them uploaded?  If you lack a reactive sponsor feel free to email me (or
contact me over IRC).

Otherwise, as people are grumpy for this bug, can I NMU it?  (I'd post a
proposed patch here, of course, etc).

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20160908/551d3ed9/attachment.sig>