On Monday 18 April 2016 19:08:09 Gianfranco Costamagna wrote: > Hi again > > >ok, so maybe this might be a question for -mentors.>did you try to > >make the debhelper dependency more explicit? e.g. >= 9.0.whatever > > > >IIRC some checks were added based on the debhelper version > > When building programs that handle untrusted data (parsers, network > listeners, etc.), or run with elevated privileges (PAM, X, etc.), > please enable "PIE" and "BINDNOW" in the build. The "all" option > enables "PIE" and "BINDNOW" and future hardening flags: > > export DEB_BUILD_MAINT_OPTIONS = hardening=+all > > did you try that? Now trying, and I do not see difference between adding that option and not adding. And even worse I'm not able to reproduce that error hardening-no-bindnow :-( > >not sure here, I'm not a symbols-savvy man :( > >please ask on -mentors and come back if you have fixes for them... > > man dpkg-gensymbols should help there... Did not helped. Anyway, symbols file supports regex, so I added: (regex|optional).* -- Pali Rohár pali.rohar@gmail.com
Attachment:
signature.asc
Description: This is a digitally signed message part.