Bug#759165: iceweasel: Enable all hardening (with hardening-wrapper)

[Simon Ruderich]

Package: iceweasel
Version: 31.0-3
Severity: important
Tags: patch

Hello,

Please enable all available hardening (relo, now and pie) for
iceweasel. As browser iceweasel is a target of many attacks which
can be complicated or prevented through the additional hardening
provided by these methods.

The attached patch uses hardening-wrapper to enable all hardening
flags as it's simpler than patching the iceweasel build system to
handle PIE.

It would be great if the hardened version of iceweasel would make
it into Jessie!

Regards
Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
-------------- next part --------------
A non-text attachment was scrubbed...
Name: iceweasel-hardening-wrapper.patch
Type: text/x-diff
Size: 885 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20140825/54840ce4/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20140825/54840ce4/attachment.sig>