On Sun, Dec 04, 2011 at 05:24:59PM -0800, Kees Cook wrote:
> On Mon, Dec 05, 2011 at 02:15:32AM +0100, Jakub Wilk wrote:
> > (I'm not the maintainer of this package.)
>
> Thanks for looking these over!
>
> > This is incorrect. The -dev package includes HTML documentation
> > which is generated at build time. The HTML documents have embedded
> > timestamps, which will, of course, differ across architectures.
>
> Ugh, good point.
>
> > >-usr/lib/lib*.{a,la,so}
> > >+usr/lib/*/lib*.[a|so]
> >
> > Ooops. After this change the package doesn't contain the .so symlink
> > anymore.
>
> Urg. Okay, switched to multiple lines instead. Should check the libdv4
> multiarch patch too, it might have the same problem.
>
> Updated debdiff attached...
I've confirmed in a local build that this patch also properly enables
hardened build flags.
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
