[Pkg-security-team] Bug#833056: hashcat: please make the build reproducible
Source: hashcat
Version: 3.00-3
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that hashcat could not be built reproducibly.
It embeds the current build time into the binary.
The attached patch uses a deterministic timestamp (SOURCE_DATE_EPOCH)
instead.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hashcat.patch
Type: text/x-diff
Size: 369 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20160731/5443d9da/attachment-0001.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20160731/5443d9da/attachment-0001.sig>
Reply to: