Bug#759751: libutempter: Please enable hardening compiler flags
Hi,
On Sat, 30 Aug 2014 01:06:17 +0200 Simon Ruderich <simon@ruderich.org> wrote:
> Source: libutempter
> Version: 1.1.5-4
> Severity: normal
> Tags: patch
>
> Hello,
>
> libutempter provides a setgid binary and therefore should enable
> all possible compiler hardening options.
>
> The attached patch enables compat=9 to automatically use
> hardening flags from dpkg-buildpackage. However the build system
> has a bug which drops compiler flags from the environment and
> therefore the second attached patch is also necessary. It should
> be sent upstream.
I agree that we should enable hardening build flags.
The PIE flags should however only be passed when linking executables.
Your patch passes it to both the library and the executable.
Cheers,
Felix
Reply to: