Your message dated Wed, 4 Mar 2026 14:42:43 +0100
with message-id <[email protected]>
and subject line Re: Bug#1070654: xfsprogs: Build with PAC/BTI support on arm64
has caused the Debian Bug report #1070654,
regarding xfsprogs: Build with PAC/BTI support on arm64
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1070654: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070654
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: xfsprogs
Version: 6.6.0-1
Severity: normal
Tags: patch
User: [email protected]
Usertags: pac-bti
Hi,
Pointer Authentication (PAC) and Branch Target Identification (BTI) are
two security features available on arm64. [1]
Please consider building xfsprogs with PAC/BTI support turned on, see
attached patch.
Thanks,
Emanuele
[1] https://wiki.debian.org/ToolChain/PACBTI
diff -Nru xfsprogs-6.5.0/debian/rules xfsprogs-6.5.0/debian/rules
--- xfsprogs-6.5.0/debian/rules 2023-08-15 21:15:28.000000000 +0200
+++ xfsprogs-6.5.0/debian/rules 2024-02-12 15:51:07.000000000 +0100
@@ -27,6 +27,10 @@
pkgdi = DIST_ROOT=`pwd`/$(dirdi); export DIST_ROOT;
stdenv = @GZIP=-q; export GZIP;
+ifeq ($(DEB_TARGET_ARCH),arm64)
+ CFLAGS = -mbranch-protection=standard
+endif
+
configure_options = \
--build=$(DEB_BUILD_GNU_TYPE) \
--with-multiarch=$(DEB_HOST_MULTIARCH) \
@@ -37,7 +41,7 @@
--enable-lto
options = export DEBUG=-DNDEBUG DISTRIBUTION=debian \
- INSTALL_USER=root INSTALL_GROUP=root LDFLAGS='$(LDFLAGS)' \
+ INSTALL_USER=root INSTALL_GROUP=root CFLAGS='$(CFLAGS)'
LDFLAGS='$(LDFLAGS)' \
LOCAL_CONFIGURE_OPTIONS="$(configure_options) --enable-editline=yes
--enable-blkid=yes" ;
diopts = $(options) \
export OPTIMIZER=-Os LOCAL_CONFIGURE_OPTIONS="$(configure_options)
--enable-gettext=no" ;
--- End Message ---
--- Begin Message ---
Hi Bastian,
On 2026-03-04 12:50, Bastian Germann wrote:
> If this is part of the hardening system and xfsprogs misses to include
> those flags, please file a patch correcting that instead of adding a
> per-architecture change.
This bug was filed some time back, and meanwhile xfsprogs has started
using the default build flags set by Debian. Closing.
--- End Message ---
