Re: release goal proposal: enable hardening build flags
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 2011-09-14 00:38, Kees Cook wrote:
> Hi,
>
> I would like to propose a release goal of enabling hardening build flags[1]
> for all C/C++ packages in the archive[2]. For Wheezy, specific sub-goals are
> being chosen.
>
> The default flags are almost settled[3], additional subgoals may come
> up[4], and more work is needed to identify the specific packages involved
> in the subgoals[5], but I'd like to get the ball rolling on this as a
> release goal.
>
> Thanks,
>
> -Kees
>
> [1] http://wiki.debian.org/Hardening
>
> [2] http://wiki.debian.org/ReleaseGoals/Hardening
>
> [3] http://lists.debian.org/debian-dpkg/2011/09/msg00025.html
>
> [4] http://lists.debian.org/debian-devel/2011/09/msg00071.html
>
> [5] http://anonscm.debian.org/viewvc/secure-testing/hardening/subgoal-important.txt?view=log
> http://anonscm.debian.org/viewvc/secure-testing/hardening/subgoal-dsa.txt?view=log
>
Hi,
I am pleased to say this release goal has been approved for Wheezy.
Please remember to use the right usertag[1].
~Niels
[1] http://lists.debian.org/debian-release/2011/09/msg00472.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=qhHy
-----END PGP SIGNATURE-----
Reply to: