Your message dated Thu, 12 Jan 2012 04:47:53 +0000
with message-id <[email protected]>
and subject line Bug#655417: fixed in sudo 1.8.3p1-3
has caused the Debian Bug report #655417,
regarding Please enabled hardened build flags
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
655417: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655417
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sudo
Version: 1.8.3p1-2
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur sudo-1.8.3p1.orig/debian/rules sudo-1.8.3p1/debian/rules
--- sudo-1.8.3p1.orig/debian/rules 2011-11-13 00:44:28.000000000 +0100
+++ sudo-1.8.3p1/debian/rules 2012-01-10 23:45:40.000000000 +0100
@@ -2,13 +2,10 @@
export DH_VERBOSE=1
-CFLAGS = -Wall -Wno-comment -g
-ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
-export CFLAGS
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall -Wno-comment
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
configure: configure-stamp
configure-stamp:
@@ -18,7 +15,7 @@
# simple version
mkdir -p build-simple
- cd build-simple && NROFFPROG=/usr/bin/nroff $(CURDIR)/configure \
+ cd build-simple && NROFFPROG=/usr/bin/nroff CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" $(CURDIR)/configure \
--prefix=/usr -v \
--with-all-insults \
--with-pam \
@@ -38,7 +35,7 @@
# LDAP version
mkdir -p build-ldap
- cd build-ldap && NROFFPROG=/usr/bin/nroff $(CURDIR)/configure \
+ cd build-ldap && NROFFPROG=/usr/bin/nroff CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" $(CURDIR)/configure \
--prefix=/usr -v \
--with-all-insults \
--with-pam \
Nur in sudo-1.8.3p1/debian: rules~.
--- End Message ---
--- Begin Message ---
Source: sudo
Source-Version: 1.8.3p1-3
We believe that the bug you reported is fixed in the latest version of
sudo, which is due to be installed in the Debian FTP archive:
sudo-ldap_1.8.3p1-3_i386.deb
to main/s/sudo/sudo-ldap_1.8.3p1-3_i386.deb
sudo_1.8.3p1-3.debian.tar.gz
to main/s/sudo/sudo_1.8.3p1-3.debian.tar.gz
sudo_1.8.3p1-3.dsc
to main/s/sudo/sudo_1.8.3p1-3.dsc
sudo_1.8.3p1-3_i386.deb
to main/s/sudo/sudo_1.8.3p1-3_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bdale Garbee <[email protected]> (supplier of updated sudo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 11 Jan 2012 16:18:13 -0700
Source: sudo
Binary: sudo sudo-ldap
Architecture: source i386
Version: 1.8.3p1-3
Distribution: unstable
Urgency: low
Maintainer: Bdale Garbee <[email protected]>
Changed-By: Bdale Garbee <[email protected]>
Description:
sudo - Provide limited super user privileges to specific users
sudo-ldap - Provide limited super user privileges to specific users
Closes: 610600 639530 639633 641218 641782 655417 655510
Changes:
sudo (1.8.3p1-3) unstable; urgency=low
.
* patch from Moritz Muehlenhoff enables hardened build flags, closes: #655417
* replacement postinst script from Mike Beattie using shell instead of Perl
* include systemd service file from Michael Stapelberg, closes: #639633
* add init.d status support, closes: #641782
* make sudo-ldap package manage a sudoers entry in nsswitch.conf,
closes: #610600, #639530
* enable mail_badpass in the default sudoers file, closes: #641218
* enable selinux support, closes: #655510
Checksums-Sha1:
95fc5d84de342df741fbafa7f7e9072e07253c58 1845 sudo_1.8.3p1-3.dsc
cd4b039fdc9814a073e714ae05afb5a139673e52 22716 sudo_1.8.3p1-3.debian.tar.gz
d0d73fd0b80f863840df1124f68a695918619bf9 674208 sudo_1.8.3p1-3_i386.deb
c5c14e40a1ca56717670b1b78373a70928122816 699474 sudo-ldap_1.8.3p1-3_i386.deb
Checksums-Sha256:
cf5d30644716bdd8c95edf3f3c4b7b28de62b59d69ee881958f184ac8c73f4ee 1845
sudo_1.8.3p1-3.dsc
883732b613b954100e5ed8d3d1297f4bf2aab3b4d8f9ae35b902b627fc1ac231 22716
sudo_1.8.3p1-3.debian.tar.gz
4af334c7e9bcc11afdb5f7fc4e0c9a494abcaae48c43155e2aff88df8c293fec 674208
sudo_1.8.3p1-3_i386.deb
092c2d2eef53aa8c93a0d550d1967229a15964d1957a9528baf539ea02872585 699474
sudo-ldap_1.8.3p1-3_i386.deb
Files:
f62aca3deb947c979f102b525ebe30e0 1845 admin optional sudo_1.8.3p1-3.dsc
40538d7cea556e5f6f97573b5037edd1 22716 admin optional
sudo_1.8.3p1-3.debian.tar.gz
43c41ec0269230e5c4cf1649fb09ef26 674208 admin optional sudo_1.8.3p1-3_i386.deb
677c2e6cb5a4b7d4cfff4422555307bb 699474 admin optional
sudo-ldap_1.8.3p1-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=cMZE
-----END PGP SIGNATURE-----
--- End Message ---
