[Bug 1039542] Re: Please re-enable PIE and BIND_NOW

[Jamie Strandboge]

Fyi, on 11.10 we have:
$ hardening-check /usr/sbin/asterisk 
/usr/sbin/asterisk:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: yes
 Read-only relocations: yes
 Immediate binding: yes

** Description changed:

  On 12.10 asterisk is not compiled with PIE or BIND_NOW. I didn't investigate, but this looks like in 12.04 this was dropped in favor of Debian's packaging:
    * Changes dropped from Ubuntu delta as no longer applicable:
      ...
      - debian/control: Build-depend on hardening-wrapper, now handled
        by dpkg-buildflags
      - debian/rules: Make use of hardening-wrapper
  
- Please reenable PIE and BIND_NOW. This needs to be done for 12.04.
+ Please reenable PIE and BIND_NOW. This needs to be done for 12.04 too.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/1039542

Title:
  Please re-enable PIE and BIND_NOW

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/1039542/+subscriptions