Okay, confirmed, solved the hardening-no-relro, and Now I can see I make a mistake on subject, It was to be hardening-no-relro and hardening-no-fortify-functions.
On Tue, Aug 11, 2015 at 11:50 AM, lucas castro <[email protected]> wrote: > I'll do that, and send to mentors. > > On Tue, Aug 11, 2015 at 11:48 AM, Gianfranco Costamagna < > [email protected]> wrote: > >> Yes, this is true. >> >> The problem is that the FTBFS is due to security flags, so it might be >> good >> to solve it anyway. >> >> However, commenting out LDFLAGS from Makefile.in should solve the issue. >> >> BTW that "-s" on the LDFLAGS shouldn't be there, it was a packaging >> problem >> fixed -6 upload and reintroduced in the version on mentors. >> >> Lucas can you please comment that line? >> >> thanks! >> >> Gianfranco >> >> >> >> >> >> Il Martedì 11 Agosto 2015 16:40, Alex Vong <[email protected]> ha >> scritto: >> Hi Lucas, >> >> I am new in packaging. `hardening-no-relro' also happens to me. It >> turns out it is caused by the missing `-Wl,-z,relro' LDFLAGS. Maybe >> overriding CFLAGS and CPPFLAGS but not LDFLAGS will solve FTBFS. >> >> For example in debian/rules, >> >> CFLAGS = '-Ofoo' >> CPPFLAGS = '-Dfoo' >> LDFLAGS += '-lfoo' >> >> override_dh_auto_configure: >> dh_auto_configure -- --enable-foo >> >> Cheers, >> Alex >> >> >> 2015-08-11 21:05 GMT+08:00, lucas castro <[email protected]>: >> > Gianfranco, >> > No problem about about that on irc. >> > I think I should take a time on another package, then mailed here. >> > and if anyone know about this, it's fine. I really spent much time on >> this >> > package, >> > and learned a lot with it. >> > >> > On Tue, Aug 11, 2015 at 9:49 AM, Gianfranco Costamagna < >> > [email protected]> wrote: >> > >> >> Hi Lucas >> >> (sorry for not answering on irc, I was AFK) >> >> >> >> hardening-check debian/xmbmon/usr/bin/xmbmon >> >> >> >> >> >> d/rules: >> >> override_dh_auto_build: >> >> $(MAKE) CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" >> CXXFLAGS="$(CXXFLAGS)" >> >> LDFLAGS="$(LDFLAGS)" >> >> >> >> >> >> >> >> something like this seems to make autoconf aware of the flags (not sure >> >> if >> >> there is a >> >> better way, and for sure you do not need them all). >> >> >> >> However with hardening stuff enabled now it FTBFS: >> >> >> >> gcc -g -O2 -fPIE -fstack-protector-strong -Wformat >> >> -Werror=format-security >> >> -Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -o mbmon >> >> mbmon.c getMBinfo.o tyan_tiger.o pci_pm.o sensors.o getMB-via.o >> >> getMB-smb.o >> >> getMB-isa.o smbuses.o smbus_piix4.o smbus_amd.o smbus_ali.o >> smbus_amd8.o >> >> sens_winbond.o sens_via686.o sens_it87.o sens_gl52.o sens_lm85.o >> >> sens_lm80.o sens_lm90.o sens_lm75.o sens_wl784.o smb_extemp.o -lm >> >> mbmon.c: In function ‘uptime’: >> >> mbmon.c:122:11: error: ‘KERN_BOOTTIME’ undeclared (first use in this >> >> function) >> >> mib[1] = KERN_BOOTTIME; >> >> ^ >> >> >> >> >> >> cheers, >> >> >> >> Gianfranco >> >> >> > >> > >> > >> > -- >> > contatos: >> > Celular: ( 99 ) 9143-5954 - Vivo >> > skype: lucasd3castro >> > msn: [email protected] >> > >> >> >> -- >> To UNSUBSCRIBE, email to [email protected] >> with a subject of "unsubscribe". Trouble? Contact >> [email protected] >> Archive: >> https://lists.debian.org/CADrxHD_sW9Hf1c==-uhsa1ks6iay5zrfew7aqeoy3frbd-4...@mail.gmail.com >> > > > > -- > contatos: > Celular: ( 99 ) 9143-5954 - Vivo > skype: lucasd3castro > msn: [email protected] > -- contatos: Celular: ( 99 ) 9143-5954 - Vivo skype: lucasd3castro msn: [email protected]
