Package: findutils Version: 4.4.2-1 Severity: important Tags: patch Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS) Cheers, Moritz
diff -aur findutils-4.4.2.orig/debian/rules findutils-4.4.2/debian/rules --- findutils-4.4.2.orig/debian/rules 2011-12-31 15:15:32.000000000 +0100 +++ findutils-4.4.2/debian/rules 2011-12-31 15:16:29.000000000 +0100 @@ -19,13 +19,10 @@ confflags += --build $(DEB_BUILD_GNU_TYPE) --host $(DEB_HOST_GNU_TYPE) endif -CFLAGS = -Wall -g - -ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS))) - CFLAGS += -O0 -else - CFLAGS += -O2 -endif +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += -Wall +LDFLAGS = `dpkg-buildflags --get LDFLAGS` +CPPFLAGS = `dpkg-buildflags --get CPPFLAGS` config.status: patch-stamp configure rm -f config.guess config.sub @@ -33,7 +30,7 @@ dh_testdir # Configure the package. - CFLAGS="$(CFLAGS)" ./configure $(confflags) \ + CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure $(confflags) \ --prefix=/usr --localstatedir=/var/cache/locate \ --enable-d_type-optimisation \ --libexecdir='$${prefix}/lib/locate' \ Nur in findutils-4.4.2/debian: rules~.