Bug#813491: s390-tools: packaging updates
On 6 February 2016 at 23:52, Philipp Kern <pkern@debian.org> wrote:
> On Tue, Feb 02, 2016 at 01:57:56PM +0000, Dimitri John Ledkov wrote:
>> I've modernised packaging a bit, and fix a bunch of lintian tags.
>>
>> I also made a patch to prevent FTBFS, when toolchain has PIE enabled by
>> default.
>>
>> Please consider applying the below patch.
>
> Please use your connections with IBM to apply the spelling fixes
> upstream. Every divergence we keep on the Debian side needs to be
> justified as they are a pain to rebase on a new release.
>
OK.
> The same is obviously true of the error-manpages diff as well, but that
> was already there. I'd appreciate if IBM could look through the patches
> if anything could be done to get them upstream so that we can carry
> less of a delta.
>
OK.
> The other changes are fine to me if there's no change to the actual
> package output except descriptions and build output. Did you test the
> resulting package on an actual s390 machine on *Debian*?
>
I have not, I shall dedicate one of my z/VMs for Debian testing actually.
> I'm a bit surprised about the explicit addition of the hardening flags,
> given that none of the binaries is suid nor a network daemon. So we
> could just follow the distro-default here. But I'm not too bothered by
> it.
True. Well, PIE is enabled in the tool-chain by default on Ubuntu, and
that does break zipl (ie. it needs it disabled). Thus actually apart
from "because I can", I'm not sure all hardening flags are actually
justified here.
--
Regards,
Dimitri.
Reply to: