Tags Tags

Bug#672575: sqlite3: Please drop build dependency on hardening-wrapper

May 12th, 2012 - 04:10 am ET by Mike Hommey | Report spam
Help Create a new topic
Package: sqlite3
Version: 3.7.11-3
Severity: normal

Since you're using /usr/share/dpkg/buildflags.mk and export its CFLAGS,
you don't need that. You may need to add DPKG_EXPORT_BUILDFLAGS=1,
though, for the LDFLAGS, but you don't need DEB_BUILD_HARDENING.


Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages sqlite3 depends on:
ii libc6 2.13-32
ii libreadline6 6.2-8
ii libsqlite3-0 3.7.11-3

sqlite3 recommends no packages.

Versions of packages sqlite3 suggests:
pn sqlite3-doc <none>




To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
email Follow the discussionReplies 2 repliesReplies Make a reply

Similar topics

Replies

#1 Laszlo Boszormenyi
May 12th, 2012 - 07:40 am ET | Report spam
Hi Mike,

On Sat, 2012-05-12 at 10:00 +0200, Mike Hommey wrote:
Since you're using /usr/share/dpkg/buildflags.mk and export its CFLAGS,
you don't need that. You may need to add DPKG_EXPORT_BUILDFLAGS=1,
though, for the LDFLAGS, but you don't need DEB_BUILD_HARDENING.


What's wrong with hardening-wrapper? If I drop it, even with
DEB_BUILD_HARDENING set to 1, I get a normal executable and not a
position independent executable.

Laszlo/GCS




To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Replies Reply to this message
#2 Mike Hommey
May 12th, 2012 - 10:00 am ET | Report spam
On Sat, May 12, 2012 at 11:30:32AM +0000, Laszlo Boszormenyi wrote:
Hi Mike,

On Sat, 2012-05-12 at 10:00 +0200, Mike Hommey wrote:
> Since you're using /usr/share/dpkg/buildflags.mk and export its CFLAGS,
> you don't need that. You may need to add DPKG_EXPORT_BUILDFLAGS=1,
> though, for the LDFLAGS, but you don't need DEB_BUILD_HARDENING.
What's wrong with hardening-wrapper? If I drop it, even with
DEB_BUILD_HARDENING set to 1, I get a normal executable and not a
position independent executable.



That's probably because you don't export LDFLAGS. But
/usr/share/dpkg/buildflags.mk is supposed to be enough on its own.
hardening-wrapper + DEB_BUILD_HARDENING is the old way to do things.

Although, if you do want PIE, which is not mandatory afaik, you need to
add export DEB_BUILD_MAINT_OPTIONS = hardening=+all.

Mike



To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
email Follow the discussion Replies Reply to this message
Help Create a new topicReplies Make a reply
Search Make your own search