On Sun, Sep 04, 2016 at 01:16:20PM +0000, Matthias Klose wrote: > Package: dns-flood-detector > Version: 1.20-2 > Severity: important > Tags: sid stretch > User: debian-...@lists.debian.org > Usertags: hardening-wrapper > > This package builds using the hardening-wrapper package, which > is now replaced by dpkg-dev's DEB_BUILD_MAINT_OPTIONS settings. > > Please consider dropping the build dependency of hardening-wrapper > and use the DEB_BUILD_MAINT_OPTIONS settings. > > The goal is to remove hardening-wrapper for the stretch release. > Discussion about the removal is tracked in https://bugs.debian.org/836162 > > The severity of this report is likely to be raised before the release, > so that the hardening-wrapper package can be removed for the release. The build dep on hardening-wrapper is spurious, the rules file already passes hardened build flags and I've confirmed that simply removing hardening-wrapper still results in a hardened build.
Cheers, Moritz