[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

hardening-no-bindnow when running from Gitlab CI, but not locally



Hello,

I thought I had fixed the STklos hardening issue with a recent commit [1], and indeed, when
gbp buildpackage and lintian --pedantic I run locally, I don't see it:

$ lintian --pedantic ../stklos_1.50+repack-1_amd64.deb
W: stklos: copyright-without-copyright-notice
W: stklos: groff-message usr/share/man/man1/stklos-script.1.gz 36: warning: numeric expression expected (got 'a')
W: stklos: national-encoding usr/share/stklos/1.50/lalr.stk
W: stklos: national-encoding usr/share/stklos/1.50/silex.scm
W: stklos: script-not-executable usr/share/stklos/1.50/Demos.d/hello.stk
W: stklos: script-not-executable usr/share/stklos/1.50/Demos.d/threads.stk
P: stklos: old-style-config-script usr/bin/stklos-config
N: 61 tags overridden (61 warnings)

But when lintian runs on salsa, it still complains:

I: stklos: hardening-no-bindnow usr/bin/stklos
I: stklos: hardening-no-bindnow usr/lib/stklos/1.50/srfi-175-impl.so

That was from the latest pipeline, after the commit was merged.

Did I miss something?

J.

[1] https://salsa.debian.org/scheme-team/stklos/-/commit/92f89f2fc3eaa0d620d33fef4f9a92b4f16b7331 [2] https://salsa.debian.org/scheme-team/stklos/-/jobs/1021515 (lines 423 / 424)


Reply to: