On Sun, Sep 04, 2016 at 01:16:44PM +0000, Matthias Klose wrote: > Package: passwordmaker-cli > Version: 1.5+dfsg-3 > Severity: important > Tags: sid stretch > User: debian-...@lists.debian.org > Usertags: hardening-wrapper > > This package builds using the hardening-wrapper package, which > is now replaced by dpkg-dev's DEB_BUILD_MAINT_OPTIONS settings. > > Please consider dropping the build dependency of hardening-wrapper > and use the DEB_BUILD_MAINT_OPTIONS settings. > > The goal is to remove hardening-wrapper for the stretch release. > Discussion about the removal is tracked in https://bugs.debian.org/836162 > > The severity of this report is likely to be raised before the release, > so that the hardening-wrapper package can be removed for the release.
The build dep on hardening-wrapper is spurious, the rules file already passes hardened build flags and I've confirmed that simply removing hardening-wrapper still results in a hardened build. Cheers, Moritz