Package: findutils
Version: 4.4.2-1
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
diff -aur findutils-4.4.2.orig/debian/rules findutils-4.4.2/debian/rules
--- findutils-4.4.2.orig/debian/rules	2011-12-31 15:15:32.000000000 +0100
+++ findutils-4.4.2/debian/rules	2011-12-31 15:16:29.000000000 +0100
@@ -19,13 +19,10 @@
 	confflags += --build $(DEB_BUILD_GNU_TYPE) --host $(DEB_HOST_GNU_TYPE)
 endif
 
-CFLAGS = -Wall -g
-
-ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
-	CFLAGS += -O0
-else
-	CFLAGS += -O2
-endif
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
 
 config.status: patch-stamp configure
 	rm -f config.guess config.sub
@@ -33,7 +30,7 @@
 
 	dh_testdir
 	# Configure the package.
-	CFLAGS="$(CFLAGS)" ./configure $(confflags) \
+	CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure $(confflags) \
 		--prefix=/usr --localstatedir=/var/cache/locate \
 		--enable-d_type-optimisation \
 		--libexecdir='$${prefix}/lib/locate' \
Nur in findutils-4.4.2/debian: rules~.

Reply via email to