Re: Bug#837938: move the hardening-check script from hardening-includes to devscripts
* Paul Wise <pabs@debian.org>, 2016-09-30, 12:44:
check-all-the-things runs hardening-check and maintainers might want to run
it manually, any thoughts about moving it to devscripts anyway?
hardening-check is also packaged for other distros:
https://admin.fedoraproject.org/pkgdb/package/rpms/hardening-check/
https://aur.archlinux.org/packages/hardening-check/
https://packages.gentoo.org/packages/app-admin/hardening-check
It would be a shame if it disappeared.
Reading through #836162 it seems like lintian is a better place for
hardening-check than devscripts. I wonder if the lintian maintainers are open
to that,
IMO devscripts or a separate package would be a better place.
which would allow keeping the stackprotector tag.
The stackprotector check in hardening-check is very simple. It would be easy to
implement it directly in Lintian. But this check is so unreliable, it's not
worth the trouble.
--
Jakub Wilk
Reply to: