Ross Gammon: > On 05/22/2016 10:03 AM, Ross Gammon wrote: >> The package is still building here, > > [...] > I: sayonara: hardening-no-pie usr/bin/sayonara > I: sayonara: hardening-no-bindnow usr/bin/sayonara > I: sayonara: hardening-no-bindnow usr/lib/sayonara/libsayonara_somafm.so > I: sayonara: hardening-no-bindnow usr/lib/sayonara/libsayonara_soundcloud.so > > Assuming the build system supports it, we should be able to enable these > hardening options. See: https://wiki.debian.org/Hardening > Hi, Please be careful with the "+pie" since the package is building both shared libs and executables. Depending on the upstream build system's it may "just work" or "break horribly". See also: * https://lintian.debian.org/tags/hardening-no-pie.html * https://lists.debian.org/debian-devel/2016/05/msg00297.html Thanks, ~Niels
Attachment:
signature.asc
Description: OpenPGP digital signature