Source: xorg-server
Version: 2:21.1.7-1
Tags: security,patch
Dear Maintaner,
please enable full hardening flags for Xorg; in particular currently
the link feature BINDNOW[1] is missing.
As Xorg is a long running daemon any potential startup costs are negligible.
[1]: https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_BINDNOW_.28ld_-z_now.29
--- rules.bak 2023-02-26 17:19:55.678436715 +0100
+++ rules 2023-02-26 17:20:04.798284731 +0100
@@ -4,6 +4,8 @@
include /usr/share/dpkg/architecture.mk
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
%:
dh $@ --with quilt