Bug#1100914: RFS: composefs/1.0.8-1 [ITP] -- mechanism for stacking read-only filesystems
Control: tags -1 -moreinfo
On Sat, Jun 07, 2025 at 09:04:23AM +0100, Phil Wyett wrote:
> Summary
> =======
>
> Looking very good, nice work, with just one issue I can see.
>
> 'debian/rules': Hardening[1] should be done at the top of the file e.g.
>
> export DEB_BUILD_MAINT_OPTIONS = hardening=+all
>
> %:
> dh $@
>
> [1] https://wiki.debian.org/Hardening
Ah yes, thanks for the reminder! Previously I had lintian warnings that the
hardening flags were not picked up in dh when I did it globally, but I have now
figured out how to do that correctly :D (Turns out, GNU make does not have a
concept of strings unlike the underlying shell, so I simply had to remove the
quotes in the variable assignment…)
New package is in the upload queue on mentors, and Git is pushed to Salsa.
- Roland
--
Roland Hieber, Pengutronix e.K. | rhi@pengutronix.de |
Steuerwalder Str. 21 | https://www.pengutronix.de/ |
31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
Reply to: