[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Enabling hardened build flags for Wheezy

Charles Plessy <plessy@debian.org> writes:

> The problem is: who wants to support what and what for ?  I thought that
> the release goal was to harden Debian, not to fine-grain makefiles in
> general.

> What I see here is a system that is generous of other people's time.

I would have assumed you would just add CPPFLAGS, CFLAGS, and LDFLAGS from
dpkg-buildflags to CFLAGS in your package if that's how your build system
works and be done.  In other words, debian/rules code like:

    include /usr/share/dpkg/buildflags.mk

            make CFLAGS="$(CPPFLAGS) $(CFLAGS) $(LDFLAGS)"

This seems only marginally more difficult than a typical package only
because you'll have to invoke dpkg-buildflags yourself and can't just use
dh, but I can't imagine this taking more than five to ten minutes in
debian/rules unless something very strange is going on.

And yet, this clearly must not be correct, since you're talking about
sending Makefile patches upstream and are upset about having your time
wasted.  What am I missing?

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: