[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#835148: marked as done (gcc-6: please enable PIE hardening flags by default on amd64 ppc64el and s390x)

Your message dated Fri, 16 Sep 2016 10:16:42 +0000
with message-id <E1bkqCI-0005b6-NN@franck.debian.org>
and subject line Bug#835148: fixed in open-coarrays 1.7.0-2
has caused the Debian Bug report #835148,
regarding gcc-6: please enable PIE hardening flags by default on amd64 ppc64el and s390x
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
835148: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835148
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: gcc-6
Version: 6.1.1-12
Severity: wishlist
Tags: patch

Dear Matthias,

As a continuation of the discussions [1][2] on debian-devel I'm
attaching the simple patch that implements enabling the PIE
hardening flags for a subset of the architectures.

I'm open to changing the subset, it matches the set selected in Ubuntu
as a start, but porters may have different preferences [2].

I'm continuing with a full archive rebuild to see the amount of packages
to be updated for the change in the default flags.

The same patch applies to gcc-5, too, if it does not get removed
from the archive before the patch is accepted for gcc-6.

Cheers,
Balint

[1] https://lists.debian.org/debian-devel/2016/05/msg00228.html
[2] https://lists.debian.org/debian-devel/2016/08/msg00324.html


>From 096fba7df4a9d699015c5f5457be7fdd21cde33e Mon Sep 17 00:00:00 2001
From: Balint Reczey <balint@balintreczey.hu>
Date: Sun, 3 Jul 2016 21:09:36 +0200
Subject: [PATCH] Enable PIE on Debian for amd64, ppc64el and s390x

---
 debian/rules.defs | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/debian/rules.defs b/debian/rules.defs
index 47a067d..443eba4 100644
--- a/debian/rules.defs
+++ b/debian/rules.defs
@@ -1222,16 +1222,19 @@ endif
 
 # pie by default --------------------
 with_pie :=
+pie_archs := amd64 ppc64el s390x
 ifeq ($(distribution),Ubuntu)
   ifeq (,$(filter $(distrelease),lucid precise trusty utopic vivid wily))
     pie_archs = s390x
+  else
+    pie_archs =
   endif
   ifeq (,$(filter $(distrelease),lucid precise trusty utopic vivid wily xenial))
     pie_archs += amd64 ppc64el
   endif
-  ifneq (,$(filter $(DEB_TARGET_ARCH),$(pie_archs)))
-    with_pie := yes
-  endif
+endif
+ifneq (,$(filter $(DEB_TARGET_ARCH),$(pie_archs)))
+  with_pie := yes
 endif
 
 # gold --------------------
-- 
2.1.4

--- End Message ---
--- Begin Message --- 
Source: open-coarrays
Source-Version: 1.7.0-2

We believe that the bug you reported is fixed in the latest version of
open-coarrays, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 835148@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alastair McKinstry <mckinstry@debian.org> (supplier of updated open-coarrays package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 14 Sep 2016 16:04:04 +0100
Source: open-coarrays
Binary: libcoarrays-dev libcoarrays0d open-coarrays-bin
Architecture: source amd64
Version: 1.7.0-2
Distribution: unstable
Urgency: medium
Maintainer: Alastair McKinstry <mckinstry@debian.org>
Changed-By: Alastair McKinstry <mckinstry@debian.org>
Description:
 libcoarrays-dev - Co-Array Fortran libraries for gfortran - development files
 libcoarrays0d - Co-Array Fortran libraries for gfortran
 open-coarrays-bin - Executables for running Co-Array Fortran programs
Closes: 835148
Changes:
 open-coarrays (1.7.0-2) unstable; urgency=medium
 .
   * Set debhelper dependency to >= 10.
   * Don't link against static lib in navier_stokes test, breaks -fPIE,
     bindow. Closes: #835148
   * disable alpha, powerpc tests again. Still buggy.
Checksums-Sha1:
 c9c3da8177b6ecf292fb249395accace75bba37b 1939 open-coarrays_1.7.0-2.dsc
 72b830ba55cc25429cf8b0f405f800c876afc71a 6404 open-coarrays_1.7.0-2.debian.tar.xz
 b962f42c575d249f6cce9f6796c77bd728321ce6 44484 libcoarrays-dev_1.7.0-2_amd64.deb
 9a5f8a4fc79cff8fb80444502585586efaa140ce 47002 libcoarrays0d-dbgsym_1.7.0-2_amd64.deb
 4959895910a5bce9eea40b7909a3413b3efa18a7 22214 libcoarrays0d_1.7.0-2_amd64.deb
 f997d387cfa5e9bd2153e425bfab08b0c30d10b4 7408 open-coarrays-bin_1.7.0-2_amd64.deb
Checksums-Sha256:
 9bedfe7a692a4ca2864ab2d1e4d08cc3c49bc8f64ed58d9d2f1be1ba1cfca763 1939 open-coarrays_1.7.0-2.dsc
 0ca9ab622346ba0c8c1d6ed04a9624dfc21fcd5d5639c1219812acda79a99ae6 6404 open-coarrays_1.7.0-2.debian.tar.xz
 ae4728377807e1953e86a5eafd36b538c9f6af0075f541b750eb3ce437b58c75 44484 libcoarrays-dev_1.7.0-2_amd64.deb
 408895a8228e83b1e19e87ec1c9a6d82fae88fba27000a37eab575cc78327f6c 47002 libcoarrays0d-dbgsym_1.7.0-2_amd64.deb
 fc7e787e12ca6eb0697bd1e269efef3bbf177264ed8fce522b58b3735fd35d29 22214 libcoarrays0d_1.7.0-2_amd64.deb
 3ff1c1e3751320ef343439a8a385561b66878f818c44a992181aa99a222fa9a0 7408 open-coarrays-bin_1.7.0-2_amd64.deb
Files:
 8cb9eadfcba33a4c52b73f14194e9863 1939 utils optional open-coarrays_1.7.0-2.dsc
 d3b5298aa144dccb93b869bdb80497b3 6404 utils optional open-coarrays_1.7.0-2.debian.tar.xz
 bcb19180d0b65289b50a5b42cab45df6 44484 libdevel optional libcoarrays-dev_1.7.0-2_amd64.deb
 e629408ece072f88cc94a363d7f01edb 47002 debug extra libcoarrays0d-dbgsym_1.7.0-2_amd64.deb
 1591af1bc661de9c661a54ab637e8a1e 22214 libs optional libcoarrays0d_1.7.0-2_amd64.deb
 294329fdcbd1c40ef27f5127eb56d1aa 7408 utils optional open-coarrays-bin_1.7.0-2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJX2XPYAAoJEMvmu05dmtOlrq0P/RVkM8kXgEgF/NsoV9W7zeLE
8JmG5SoeioV13bLau+SitHxjQ5gO15uQBh6/LxG8fMmAaePA4+mjZdAHEPQ2Qcg/
3sU0HNdcHSlIL2gzGQX+5UCrbin8Qphshe0DAs7tCFL+WDweJPFzbq9HqoSL5f50
DOV8wnmpxSvJgkHGCs8TZxkpELEekgjoKhUaeK5rKXLS7tbtyxS8qN+a8KpqHEaW
kpWi6Z7LiDeMBeOWm1ruTys/RN0LJ3d9PAtJ+Z8nmB27Qt30RrN0eFvEc227ZjS3
bMr8k0wVzLeRzkDS9+/GOgjdSSQdD/8pA0kVPDc4UW/MHSeTHZDigLUtNL4A4tDX
CIBT4VOu6owlueWnZWJOKhNANmAxXIQN/AAij/lGRxr0ygJNt0yt+oUzsn9WKitT
ef50bhq8uNQUtr47D5KLtjJsvurRArVe/dWhvGxG2v9gzOnDvixCJgAUXqLW1/Cz
ddheskrYV8mEijEvak1MghOoKnwxu0BQ/8yiXB9gh7b71vSa9Snj9PEd6Rk/JVaV
S1JhMw+Ndy3nC1Mb2nPm9w/iMFIF+70nBl6Nzvk6zPRBJQZAEN/8rP2El/0ns3R0
KZHMa3JOBGOQ2DNaaDCf0XAc64TCuCv1dK3K3n8I047p2trC2Gsw8Ub5Yq1EylDu
g3QlVCeDPocrsuVN8Z2x
=uUvx
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: