Source: freehsm-c Version: 1.6.0-1 Severity: important https://buildd.debian.org/status/logs.php?pkg=freehsm-c&ver=1.6.0-1
... cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/build/reproducible-path/freehsm-c-1.6.0=. -fdebug-prefix-map=/build/reproducible-path/freehsm-c-1.6.0=. -frandom-seed=fhsm-1.6.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-error=format-truncation -Wno-error=unused-but-set-variable -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/freehsm-c-1.6.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_state.o src/fhsm_state.c cc1: error: ‘-fcf-protection=full’ is not supported for this target make[2]: *** [Makefile:244: src/fhsm_state.o] Error 1 HARDEN_FLAGS in Makefile hadcodes architecture-specific options, it would be better to leave hardening to dpkg flags.
