Re:
Hi,
>I'm struggling with the creation of a Debian package. The problem is the hardening part. I tried everything what the Hardening Guide suggested, but no success so >far.>Lintian always throws a lot of warning about hardening-no-relro:
AFAIR this is a linker flag
https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_RELRO_.28ld_-z_relro.29
>Now running lintian...
>W: eclipse-titan: hardening-no-relro usr/bin/compiler
>
>W: eclipse-titan: hardening-no-relro usr/bin/mctr_cli
>W: eclipse-titan: hardening-no-relro usr/bin/tcov2lcov
>W: eclipse-titan: hardening-no-relro usr/bin/ttcn3_logfilter
>
>... and so on.
Here is my debian/rules file:
>override_dh_auto_install:
>$(MAKE) DESTDIR=$$(pwd)/debian/eclipse-titan prefix=/usr install
>cp -aR $$(pwd)/Install/bin/* $$(pwd)/debian/eclipse-titan/usr/bin/
>cp -aR $$(pwd)/Install/include/* $$(pwd)/debian/eclipse-titan/usr/include/titan/
>cp -aR $$(pwd)/Install/lib/* $$(pwd)/debian/eclipse-titan/usr/lib/titan/
>cp -aR $$(pwd)/Install/man/man1/* $$(pwd)/debian/eclipse-titan/usr/share/man/man1/
>cp -aR $$(pwd)/Install/demo/* $$(pwd)/debian/eclipse-titan/usr/share/titan/demo/
>cp -aR $$(pwd)/Install/etc/* $$(pwd)/debian/eclipse-titan/usr/share/titan/etc/
>mv $$(pwd)/debian/eclipse-titan/usr/bin/ttcn3_archive.pl $$(pwd)/debian/eclipse-titan/usr/share/titan/etc/scripts/
>rm -fR $$(pwd)/debian/eclipse-titan/usr/share/titan/etc/asciiart/
>cp -aR $$(pwd)/Install/help/* $$(pwd)/debian/eclipse-titan/usr/share/titan/help/
this isn't useful for build/link issues
>I don't know what's the problem here. Can somebody help me to solve this please?
you can start by:
export DH_VERBOSE=1, try to enable VERBOSE builds in your package, look if flags are overridden somewhere
e.g. in makefiles a line like
"LDFLAGS ="
means: do not use externally passed link flags
lines like
./Makefile.cfg:LDFLAGS = $(MINGW)
./etc/autotest/titan_builder.py: makefile_cfg_new.write('LDFLAGS = %s\n' % config['ldflags'])
./compiler2/makefile.c: "LDFLAGS = %s%s\n\n"
might give you hints or be source of troubles
anyway I don't see any LDFLAGS in the build log
e.g.
g++ -fPIC -o mctr_cli Cli_main.o MctrError.o MainController.o UserInterface.o config_data.o ../../common/memory.o ../../common/config_preproc.o ../../common/config_preproc_la.o ../../common/config_preproc_p.tab.o ../../common/path.o ../../common/NetworkHandler.o ../../common/Path2.o ../../core/RInt.o ../../core/Textbuf.o ../cli/libcli.a ../editline/build/src/.libs/libedit.a \
-lcrypto -lncurses -lpthread
and BTW you shouldn't in my opinion use static libraries (well, they are internal so you might even not consider this as a problem)
find . -name configure.ac
./mctr2/editline/libedit/configure.ac
you might want to run autoreconf here ^^^
cheers,
G.
Reply to: