Your message dated Sat, 19 May 2012 15:27:55 +0200 with message-id <201205191528.31688.panfa...@gmail.com> and subject line Closing some hardening flags bugs has caused the Debian Bug report #653354, regarding Hardening build flags not enabled to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 653354: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653354 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: amarok Version: 2.5.0-1 Severity: important Contrary to what's stated in the changelog, the hardened build flags are not enabled: jmm@pisco:~$ dpkg -l amarok Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Description +++-==========================-==========================-==================================================================== ii amarok 2.5.0-1 easy to use media player based on the KDE Platform jmm@pisco:~$ hardening-check /usr/bin/amarok /usr/bin/amarok: Position Independent Executable: no, normal executable! Stack protected: no, not found! Fortify Source functions: unknown, no protectable libc functions used Read-only relocations: yes Immediate binding: no not found! jmm@pisco:~$ They're likely reset by cmake? Cheers, Moritz
--- End Message ---
--- Begin Message ---I'm closing these bugs because the involved packages are using the dh sequencer addon for kde. While cmake still doesn't respect CPPFLAGS, a workaround was added to the mentioned addon, so if you build any of the packages involved it will include the hardening flags. At least one of the involved packages (amarok) was built before the workaround mentioned above was done. Therefore if you think it's really important to get any of them built with the hardening flags feel free to request a binNMU.
Description: This is a digitally signed message part.
--- End Message ---
_______________________________________________ pkg-kde-extras mailing list firstname.lastname@example.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras