On 05.09.16 Matthias Klose (d...@debian.org) wrote: Hi Matthias,
> This package builds using the hardening-includes package, which
> is now replaced by dpkg-dev's DEB_BUILD_MAINT_OPTIONS settings.
>
> Please consider dropping the build dependency of hardening-includes
> and use the DEB_BUILD_MAINT_OPTIONS settings.
>
Currently hardening is implemented like this:
./configure $(shell dpkg-buildflags --export=configure) (...)
..according to [1]. The only place where we use hardening-includes is
that line:
find $(CURDIR)/debian/tmp -type f \( -executable -o -name \*.so\* \) -exec
hardening-check {} + || true
Is it OK to simply remove that check? Is there an replacement for
hardening-check?
Thanks,
Hilmar
[1]
https://wiki.debian.org/HardeningWalkthrough#rules_files_based_on_standard_debhelper_or_hand-written_rules_files
--
sigfault
signature.asc
Description: Digital signature
