Re: Enhancements/enabled hardening flags in Wheezy pkgs/release.

[Moritz Mühlenhoff <jmm@inutil.org>]

Michael Gilbert <mgilbert@debian.org> schrieb:
> There isn't really any group effort tackling or monitoring the
> assortment of useful hardening features.  That is something that could
> definitely be improved.

Here's some concrete issues where people can help out. Many of these
tasks will take less than an hour and you don't need to be a DD.
So if anyone wants to make a difference, please help out:

The following packages have had a DSA in the previous years, but do
not use hardened build flags. Read https://wiki.debian.org/HardeningWalkthrough
and create a patch to enable hardened build flags in these packages.
Once ready, file the bug to the BTS:

openjpeg
dropbear
libxp
pixman
cfingerd
bacula
pcp
raptor
libotr
gridengine
dhcpcd
plib
davfs2
torque
heartbeat
netpbm-free (initial work available at 655737)
noweb

If you have any questions, please drop by in #debian-security

Cheers,
        Moritz