[hardening-discuss] Bug#586215: hardening-wrapper: Enable PIE hardening on OS=hurd?

Samuel Thibault sthibault at debian.org
Thu Jun 17 12:46:05 UTC 2010


Package: hardening-wrapper
Version: 1.27
Severity: normal

Hello,

I have tested a simple hello world program built with PIE, it does run
fine, is there any other test I should run with PIE enabled?  If not,
please apply attached patch.

Samuel

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages hardening-wrapper depends on:
ii  g++                           4:4.4.3-1  The GNU C++ compiler
ii  gcc                           4:4.4.3-1  The GNU C compiler
ii  perl                          5.10.1-13  Larry Wall's Practical Extraction 

hardening-wrapper recommends no packages.

hardening-wrapper suggests no packages.

-- no debconf information

-- 
Samuel Thibault <samuel.thibault at fnac.net>
"...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and
the Ugly)."
(By Matt Welsh)
-------------- next part --------------
--- hardening.make.orig	2010-06-17 14:43:28.000000000 +0200
+++ hardening.make	2010-06-17 14:43:54.000000000 +0200
@@ -40,7 +40,7 @@
 
 DEB_BUILD_HARDENING ?= 1
 
-ifneq (,$(filter $(DEB_HOST_ARCH_OS), linux knetbsd ))
+ifneq (,$(filter $(DEB_HOST_ARCH_OS), linux knetbsd hurd ))
   # PIE enabled only on linux/knetbsd (bug 430455)
   ifeq (,$(filter $(DEB_HOST_ARCH_CPU), hppa m68k mips mipsel avr32 ))
     # disabled on hppa (bug number needed)


More information about the hardening-discuss mailing list