Bug#972181: possible-gpl-code-linked-with-openssl tag/test can be retired

2020-10-13 Thread Moritz Muehlenhoff
Package: lintian Severity: normal X-Debbugs-Cc: mbi...@debian.org The possible-gpl-code-linked-with-openssl test is no longer needed, FTP masters are now treating OpenSSL as a system library, which makes it GPL compatible:

Re: diversions for linkers need an update

2016-10-06 Thread Moritz Muehlenhoff
On Wed, Sep 14, 2016 at 10:03:51PM -0700, Kees Cook wrote: > On Thu, Sep 01, 2016 at 05:17:06PM +0200, Moritz Muehlenhoff wrote: > > I think we should remove hardening-wrapper for the stretch release? > > dpkg-buildflags/dh > > are around for a long time now and we're dow

Bug#735494: Please add test for packages build-depending on hardening-wrapper

2014-01-15 Thread Moritz Muehlenhoff
Package: lintian Version: 2.5.21 Severity: wishlist Hi, please create a lintian test for packages build-depending on hardening-wrapper: hardening-wrapper was an initial solution to introducing hardened build flags, but what we have now (dpkg-buildflags) is the cleaner solution and also allows

Bug#702349: lintian should not complain about hardening for package written in pure Ocaml

2014-01-06 Thread Moritz Muehlenhoff
On Tue, Mar 05, 2013 at 08:57:01PM +0100, Stéphane Glondu wrote: Le 05/03/2013 16:35, Niels Thykier a écrit : Does ELF binaries produced by pure Ocaml have any distinct feature that can be used to tell them apart from any other ELF binary? ELF binaries produced by the OCaml compiler always

Bug#650536: Please add a lintian test for missing hardened build flags

2011-11-30 Thread Moritz Muehlenhoff
Package: lintian Version: 2.5.3 Severity: wishlist As you're most likely well-aware hardened build flags are a release goal for Wheezy: http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags Please create a lintian test for packages, which don't enable hardened build flags yet.

Bug#563984: Detect obsolete versioned build dependencies

2010-01-06 Thread Moritz Muehlenhoff
Package: lintian Version: 2.3.0 Severity: wishlist Dear lintian maintainers, I would like to suggest a lintian test, which checks if any versioned build dependencies exist where the versions are lower than the version in oldstable. While this is technically not a problem, it's cruft which