Your message dated Wed, 29 Oct 2014 11:49:17 +0000
with message-id <[email protected]>
and subject line Bug#763158: fixed in portsentry 1.2-14
has caused the Debian Bug report #763158,
regarding Hardening options incomplete: missings CPPFLAGS and LDFLAGS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
763158: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763158
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: portsentry
Version: 1.2-13
Severity: important
Tags: patch
User: [email protected]
Usertags: goal-hardening
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello,
Please enable CPPFLAGS and LDFLAGS from dpkg-buildflags (patch
attached). dpkg-buildflags handle "noopt" from DEB_BUILD_OPTIONS.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Pidp
-----END PGP SIGNATURE-----
diff -Nru portsentry-1.2/debian/changelog portsentry-1.2/debian/changelog
--- portsentry-1.2/debian/changelog 2012-01-14 15:28:24.000000000 +0100
+++ portsentry-1.2/debian/changelog 2014-09-28 11:34:24.000000000 +0200
@@ -1,3 +1,11 @@
+portsentry (1.2-13.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Use dpkg-buildflags and pass {CPP,LD}FLAGS to make and patch upstream
+ Makefile to use them
+
+ -- Guillaume Delacour <[email protected]> Sun, 28 Sep 2014 11:29:22 +0200
+
portsentry (1.2-13) unstable; urgency=low
* Switch to dpkg-source 3.0 (quilt) format
diff -Nru portsentry-1.2/debian/patches/01_dpkg-buildflags.patch portsentry-1.2/debian/patches/01_dpkg-buildflags.patch
--- portsentry-1.2/debian/patches/01_dpkg-buildflags.patch 1970-01-01 01:00:00.000000000 +0100
+++ portsentry-1.2/debian/patches/01_dpkg-buildflags.patch 2014-09-28 11:40:10.000000000 +0200
@@ -0,0 +1,17 @@
+Author: Guillaume Delacour <[email protected]>
+Description: Patch upstream Makefile to use {CPP,LD}FLAGS
+Last-Update: 2014-09-28
+
+Index: portsentry-1.2/Makefile
+===================================================================
+--- portsentry-1.2.orig/Makefile
++++ portsentry-1.2/Makefile
+@@ -107,7 +107,7 @@ linux:
+ debian-linux:
+ SYSTYPE=debian-linux
+ @echo "Making $(SYSTYPE)"
+- $(CC) $(CFLAGS) -DLINUX -DDEBIAN -DSUPPORT_STEALTH -o ./portsentry ./portsentry.c \
++ $(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -DLINUX -DDEBIAN -DSUPPORT_STEALTH -o ./portsentry ./portsentry.c \
+ ./portsentry_io.c ./portsentry_util.c $(LIBS)
+
+
diff -Nru portsentry-1.2/debian/patches/series portsentry-1.2/debian/patches/series
--- portsentry-1.2/debian/patches/series 2012-01-14 15:27:18.000000000 +0100
+++ portsentry-1.2/debian/patches/series 2014-09-28 11:33:41.000000000 +0200
@@ -2,3 +2,4 @@
00_fix_portsentry.c.patch
00_fix_README.install.patch
00_fix_Makefile.patch
+01_dpkg-buildflags.patch
diff -Nru portsentry-1.2/debian/rules portsentry-1.2/debian/rules
--- portsentry-1.2/debian/rules 2012-01-14 15:27:18.000000000 +0100
+++ portsentry-1.2/debian/rules 2014-09-28 11:41:07.000000000 +0200
@@ -9,6 +9,9 @@
# Uncomment this to turn on verbose mode.
export DH_VERBOSE=1
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+
DEST=`pwd`/debian/`dh_listpackages`
ETCDIR=$(DEST)/etc/portsentry
PPP=$(DEST)/etc/ppp
@@ -17,13 +20,8 @@
INSTALL=install
INSTALL_PROGRAM = $(INSTALL) -p -o root -g root -m 755
-CFLAGS=-Wall -g
+CFLAGS+=-Wall
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
INSTALL_PROGRAM += -s
endif
@@ -42,7 +40,7 @@
dh_testdir
# Add here commands to compile the package.
- $(MAKE) CFLAGS="$(CFLAGS)" -f Makefile debian-linux
+ $(MAKE) CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" -f Makefile debian-linux
touch build-stamp
--- End Message ---
--- Begin Message ---
Source: portsentry
Source-Version: 1.2-14
We believe that the bug you reported is fixed in the latest version of
portsentry, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dario Minnucci <[email protected]> (supplier of updated portsentry package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 29 Oct 2014 12:34:30 +0100
Source: portsentry
Binary: portsentry
Architecture: source i386
Version: 1.2-14
Distribution: unstable
Urgency: medium
Maintainer: Dario Minnucci <[email protected]>
Changed-By: Dario Minnucci <[email protected]>
Description:
portsentry - Portscan detection daemon
Closes: 763158
Changes:
portsentry (1.2-14) unstable; urgency=medium
.
* debian/control:
- Bump standards version to 3.9.2.
- Update debhelper compatibility to 9
* debian/patch:
+ Add debian/patches/01_dpkg-buildflags.diff to complete hardening
options. Thanks to Guillaume Delacour <[email protected]>
(Closes: #763158)
* debian/copyright:
- Fix DEP-5 compatibility issues
- Update copyright years
* debian/portsentry.init.d:
- Add source /lib/lsb/init-functions
- Set Required-Start dependency to $syslog
Checksums-Sha1:
644cd8c5bc51ead15d65baa160ae72d816718213 1850 portsentry_1.2-14.dsc
b255554b0cf398bfd3e5ce8edc6452f8c3adba58 36220 portsentry_1.2-14.debian.tar.xz
d9e50a21116f65a8326695678ce63f7b953dd352 72854 portsentry_1.2-14_i386.deb
Checksums-Sha256:
99b30122eb6b6ba7f4fc9a528a2575be71526d70d39ede16a27c2b81ab092635 1850
portsentry_1.2-14.dsc
f10330da47029f1f200d836109a7f8ac6e036a2e7f6435c6f3fd5ad23af7376f 36220
portsentry_1.2-14.debian.tar.xz
796fa945a91e8a4f3a2ec608c95bc016c52104be00d53c4d9d37625bf48240d2 72854
portsentry_1.2-14_i386.deb
Files:
433b06e4c8e250512c41ce4872514d1e 1850 net optional portsentry_1.2-14.dsc
be2335b56503f61ac1b5580a40738a5d 36220 net optional
portsentry_1.2-14.debian.tar.xz
abca50ad785863b5976299be9fa610fc 72854 net optional portsentry_1.2-14_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCAAGBQJUUNHAAAoJEKgvu4Pz1XAziFEP/3GI//12g4CvwGGyaAZ0LsfE
vpqXzwCdbVOvZ24YJrE7I2lHABiXEgXGg89Gm5oyO7PpyKtseAiqcqywQV+7O3NL
+ENRhVO8AK+pe4H+rYLmlXxOKH0K+WL/Djd/igVTjFgeWoh2Eu6wFt1LLmaQoS6E
7Diwe8h6ZQaJ+1hg+GeT3XHlt0Tj4FnEtaJtm96MCDLYgU/XrYZLPlIuUf+l41jn
3PZd1djM+nD/YQ0A/OHQHxdmykoopanBDhmJTu/lsMeAyipk0t5IhlI7Y+Hs0phH
AtxnZzZ5gOMw3qA/dhwsckxv6Lg8EeJ5wJzWX34QF7hm7HU38wlj2cALAo7OH4Fq
hczC0z3MNlsW42E60pVUowgVA+1die2DMVPJPH+wbtdlt9MPAehHuw4rLKz/ecjN
6nY4tlJID2vVr7JgoiIO2/7HrxBXLjUSbkETFwAU63Ap+8e42VUcH5oQxj7vJ7o0
78SweyXXR/u2geqUhWb8AwMSlRjLTf77nV6d83/MkgDIx6TCpXS7y+Q+Tb26TFnA
aqFddTl7+V0sHRdb0u5upNyTByPupH8BpztZnOWR7ajo6ch9e2xEJCKpSm719HJ8
R/cMH38r6AmJ1+rKG7YA5D23qGgWskXIP/ABA91HSv2KO57Ukp3yb4+M8sxHQ5Av
4GINjtygq41BoskbVCH2
=958K
-----END PGP SIGNATURE-----
--- End Message ---
