Your message dated Tue, 10 Jan 2012 16:54:02 +0000
with message-id <[email protected]>
and subject line Bug#653502: fixed in acpid 1:2.0.14-2
has caused the Debian Bug report #653502,
regarding Please enable hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
653502: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653502
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: acpid
Version: 1:2.0.14-1
Severity: important
Tags: patch
acpid already takes the default CFLAGS from dpkg-buildflags,
which enables a protected stack.
However, FORTIFIED_SOURCE and relro are still missing. Patch
attached.
Cheers,
Moritz
diff -aur acpid-2.0.14.orig/debian/rules acpid-2.0.14/debian/rules
--- acpid-2.0.14.orig/debian/rules 2011-12-29 00:08:30.000000000 +0100
+++ acpid-2.0.14/debian/rules 2011-12-29 00:24:36.000000000 +0100
@@ -2,8 +2,11 @@
cflags := -W -Wall -Werror -Wundef -Wshadow -D_GNU_SOURCE \
$(shell dpkg-buildflags --get CFLAGS) \
+ $(shell dpkg-buildflags --get CPPFLAGS) \
-fno-strict-aliasing
+
+
build: build-arch build-indep
build-arch: build-stamp
build-indep: build-stamp
Nur in acpid-2.0.14/debian: rules~.
diff -aur acpid-2.0.14.orig/Makefile acpid-2.0.14/Makefile
--- acpid-2.0.14.orig/Makefile 2011-11-15 22:34:09.000000000 +0100
+++ acpid-2.0.14/Makefile 2011-12-29 00:24:16.000000000 +0100
@@ -33,6 +33,9 @@
CFLAGS = -W -Wall -Werror -Wundef -Wshadow -D_GNU_SOURCE $(OPT) \
-fno-strict-aliasing -g $(DEFS)
+
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+
DEFS = -DVERSION="\"$(VERSION)\""
all: $(PROGS)
Nur in acpid-2.0.14: Makefile~.
--- End Message ---
--- Begin Message ---
Source: acpid
Source-Version: 1:2.0.14-2
We believe that the bug you reported is fixed in the latest version of
acpid, which is due to be installed in the Debian FTP archive:
acpid_2.0.14-2.diff.gz
to main/a/acpid/acpid_2.0.14-2.diff.gz
acpid_2.0.14-2.dsc
to main/a/acpid/acpid_2.0.14-2.dsc
acpid_2.0.14-2_amd64.deb
to main/a/acpid/acpid_2.0.14-2_amd64.deb
kacpimon_2.0.14-2_amd64.deb
to main/a/acpid/kacpimon_2.0.14-2_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Meskes <[email protected]> (supplier of updated acpid package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 10 Jan 2012 17:27:11 +0100
Source: acpid
Binary: acpid kacpimon
Architecture: source amd64
Version: 1:2.0.14-2
Distribution: unstable
Urgency: low
Maintainer: Debian Acpi Team <[email protected]>
Changed-By: Michael Meskes <[email protected]>
Description:
acpid - Advanced Configuration and Power Interface event daemon
kacpimon - Kernel ACPI Event Monitor
Closes: 653502 655075
Changes:
acpid (1:2.0.14-2) unstable; urgency=low
.
* Made init script start before/stop after gdm3 instead of gdm which does not
exist anymore. (Closes: #655075)
* Enable hardened build flags.
Thanks to Moritz Muehlenhoff <[email protected]> (Closes: #653502)
Checksums-Sha1:
9beb915ca5bac958b4680388c9a788f162462768 1300 acpid_2.0.14-2.dsc
9c1dfa2f8f78302c6755031643d6e28963535504 18881 acpid_2.0.14-2.diff.gz
a75c3fd5f400b89a95c8cd08c5cac7870d0beebd 56536 acpid_2.0.14-2_amd64.deb
8ab4bc42d82ada65d2650770909497a0dcd36a66 30988 kacpimon_2.0.14-2_amd64.deb
Checksums-Sha256:
a04b0a114e378e49d0fcea504003cf576f561493ad2478fbe71784bfed9236df 1300
acpid_2.0.14-2.dsc
b983f82074dc20e05dd8f374e13b4487bd2f92d8c0fc512e274f928093c46b5f 18881
acpid_2.0.14-2.diff.gz
dc3478b6fc44adf60a318302a7c094a2a26a458702d49d538efc6a276367fee3 56536
acpid_2.0.14-2_amd64.deb
ecfc9d2f41c59f4f4bf6aaf10d88df9c706d0ef177a07f038e83faf8af6e338e 30988
kacpimon_2.0.14-2_amd64.deb
Files:
2cc5981babf834866fb8413a5fb8ce13 1300 admin optional acpid_2.0.14-2.dsc
755ebc59ffda325ac9f6e1f58207f74f 18881 admin optional acpid_2.0.14-2.diff.gz
aa77fcd9eb3318cb8a836391126f5575 56536 admin optional acpid_2.0.14-2_amd64.deb
d49f519e33809adc07ecde7e1ef7060e 30988 utils extra kacpimon_2.0.14-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFPDGhxVkEm8inxm9ERAhPFAJ922Yfb08gRVRYSAHAjHHY0/91vSQCeLM77
KZrxueGLKxbL9LY5delrRco=
=wGff
-----END PGP SIGNATURE-----
--- End Message ---
