Bug#656656: Please enabled hardened build flags

[Moritz Muehlenhoff]

Source: xmltooling
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

I've attached a partial patch. It enables a protected stack and
read-only relocs.

Fortified source functions are not properly enabled. I haven't
debugged this further, but it seems as if CPPFLAGS (-D_FORTIFY_SOURCE=2)
isn't properly propagated in the upstream build system. You might
want to take this upstream or clone the bug.

Cheers,
        Moritz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xmltooling-harden.patch
Type: text/x-diff
Size: 549 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-shibboleth-devel/attachments/20120120/f5a9b9f3/attachment.patch>