[PKG-IRC-Maintainers] Bug#664984: Please enable hardened build flags

Carlos Alberto Lopez Perez clopez at igalia.com
Thu Mar 22 02:26:30 UTC 2012


Package: ngircd
Version: 19-1
Tags: patch, security


Please enable hardened build flags through hardening-wrapper.

http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
http://wiki.debian.org/Hardening#Using_Hardening_Options


I am attaching a patch for it.


Before the patch:

$ hardening-check /usr/sbin/ngircd
/usr/sbin/ngircd:
 Position Independent Executable: no, normal executable!
 Stack protected: yes
 Fortify Source functions: no, only unprotected functions found!
 Read-only relocations: no, not found!
 Immediate binding: no not found!


After the patch:

$ hardening-check /usr/sbin/ngircd
/usr/sbin/ngircd:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: yes (some protected functions found)
 Read-only relocations: yes
 Immediate binding: yes


Thanks!

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Carlos Alberto Lopez Perez                           http://neutrino.es
Igalia - Free Software Engineering                http://www.igalia.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


-------------- next part --------------
A non-text attachment was scrubbed...
Name: hardening-flags-debian-rules.patch
Type: text/x-diff
Size: 1034 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-irc-maintainers/attachments/20120322/c7044c64/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-irc-maintainers/attachments/20120322/c7044c64/attachment.pgp>


More information about the Pkg-irc-maintainers mailing list