Thanks Jackub, I used before and the package is clean. So, in this case, not needed any extra hardening. But I agree with you and I will use/recommend 'export DEB_BUILD_MAINT_OPTIONS = hardening=+all' when needed.
Cheers, Eriberto 2014-08-06 17:22 GMT-03:00 Jakub Wilk <[email protected]>: > * Eriberto <[email protected]>, 2014-08-06, 16:05: > >>> Is then >>> >>> export DEB_BUILD_MAINT_OPTIONS = hardening=+all >>> >>> or >>> >>> export DEB_BUILD_MAINT_OPTIONS = hardening=+all >>> DPKG_EXPORT_BUILDFLAGS = 1 >>> include /usr/share/dpkg/buildflags.mk >>> >>> requested? >>> >> >> Not needed. Debhelper 9 do it automatically. > > > FWIW, debhelper itself doesn't enable all the hardening features, only the > default ones. If you wanted to enable everything, you'd still need: > > export DEB_BUILD_MAINT_OPTIONS = hardening=+all > > >> You will see no lintian notices about hardening. > > > Lintian hardening checks are not very reliable. > I recommend using blhc(1), which is more robust. > > -- > Jakub Wilk > > > -- > To UNSUBSCRIBE, email to [email protected] > with a subject of "unsubscribe". Trouble? Contact > [email protected] > Archive: https://lists.debian.org/[email protected] > -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/CAP+dXJfT2T_LVxRtrE--YufB=ht27rnykbvhwre+ziw25pp...@mail.gmail.com
