Bug#873379: devscripts: Please enable hardening buildflags (for /usr/bin/debpkg)

Mattia Rizzolo mattia at debian.org
Tue Aug 29 14:29:29 UTC 2017


On Tue, Aug 29, 2017 at 03:23:45PM +0100, Chris Lamb wrote:
> --- a/debian/rules
> +++ b/debian/rules
> @@ -1,6 +1,11 @@
>  #!/usr/bin/make -f
>  
>  UBU_SUGGESTS=debian-keyring, equivs, liblwp-protocol-https-perl, libsoap-lite-perl
> +DPKG_EXPORT_BUILDFLAGS = 1
    ^^^^^^^^^^^^^^^^^^^^^^^^
> +
> +export DEB_BUILD_MAINT_OPTIONS = hardening=+all
> +
> +include /usr/share/dpkg/buildflags.mk
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^


The "underlighted" lines are not needed anymore with debhelper compat
level >= 9, as dh and dh_auto_* tools export the variables coming from
dpkg-buidflags.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/devscripts-devel/attachments/20170829/294424f9/attachment.sig>


More information about the devscripts-devel mailing list