ACK: [PATCH] debian: Add hardening options

[Alex Hung]

On 07/25/2012 02:59 PM, Keng-Yu Lin wrote:
> ---------- Forwarded message ----------
> From: Colin Ian King <colin.king at canonical.com>
> Date: Tue, Jul 24, 2012 at 7:02 PM
> Subject: ACK: [PATCH] debian: Add hardening options
> To: Keng-Yu Lin <kengyu at canonical.com>
>
>
> On 24/07/12 11:28, Keng-Yu Lin wrote:
>>
>> Several compile-time options to help against memory corruption attacks, or
>> provide additional warning messages during compiles.
>>
>> Please see http://wiki.debian.org/Hardening for defail.
>>
>> Signed-off-by: Keng-Yu Lin <kengyu at canonical.com>
>> ---
>>    debian/control |    2 +-
>>    debian/rules   |    2 ++
>>    2 files changed, 3 insertions(+), 1 deletion(-)
>>
>> diff --git a/debian/control b/debian/control
>> index cd7e199..1f93c6a 100644
>> --- a/debian/control
>> +++ b/debian/control
>> @@ -4,7 +4,7 @@ Priority: optional
>>    Maintainer: Firmware Testing Team <firmware-testing-team at lists.launchpad.net>
>>    Uploaders: Colin King <colin.king at ubuntu.com>, Keng-Yu Lin <kengyu at ubuntu.com>, Alex Hung <alex.hung at canonical.com>, Chris Van Hoof <vanhoof at canonical.com>, Ivan Hu <ivan.hu at canonical.com>
>>    Standards-Version: 3.9.3
>> -Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison
>> +Build-Depends: debhelper (>= 7.0.50~), autoconf, automake, libtool, libpcre3-dev (>= 7.8), libjson0-dev (>= 0.9), flex, bison, hardening-wrapper
>>
>>    Package: fwts
>>    Architecture: any
>> diff --git a/debian/rules b/debian/rules
>> index 0f317e6..4af7a4f 100755
>> --- a/debian/rules
>> +++ b/debian/rules
>> @@ -1,5 +1,7 @@
>>    #!/usr/bin/make -f
>>
>> +export DEB_BUILD_HARDENING=1
>> +
>>    override_dh_auto_configure:
>>          autoreconf -ivf
>>          dh_auto_configure
>>
> This is a good idea to have included.
>
> Acked-by: Colin Ian King <colin.king at canonical.com>
>
Acked-by: Alex Hung <alex.hung at canonical.com>