Source: accountsservice Version: 22.08.8-6 Tags: security,patch Dear Maintaner,
please enable full hardening flags for accounts-daemon; in particular currently the link feature BINDNOW[1] is missing. As accounts-daemon is a long running daemon any potential startup costs are negligible. [1]: https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29 --- rules.bak 2023-02-26 17:22:41.371721516 +0100 +++ rules 2023-02-26 17:22:52.163547706 +0100 @@ -1,6 +1,7 @@ #!/usr/bin/make -f # -*- makefile -*- +export DEB_BUILD_MAINT_OPTIONS = hardening=+all export DEB_LDFLAGS_MAINT_APPEND=-Wl,--as-needed binaries := $(shell dh_listpackages)
