Web lists-archives.com

Re: Seeking hardening flag / blhc expoert




On Fri, Apr 05, 2019 at 09:55:34PM +0300, Otto Kekäläinen wrote:
> Hello!
> 
> > > Is there any hardening flag / cmake expert around who could help me
> > > get the hardening flags perfect in MariaDB 10.3?
> > Start with https://wiki.debian.org/Hardening#Notes_for_packages_using_CMake
> 
> I've read this section many times over but I don't get it. A
> workaround is presented but since we are on a new debhelper it is
> advised not to be used.
The actual words are "only with compat=9 and dh_auto* commands!".
You are not using dh_auto_*.

> > > d/rules:
> > > https://salsa.debian.org/mariadb-team/mariadb-10.3/blob/master/debian/rules
> > One of the problems is using $(MAKE) instead of dh_auto_build and so on.
> > There are other problems in this file.
> Since the build command is constructed in the
> override_dh_auto_configure stanza this is the only way I am aware that
> I can pass it on to dh_auto_build. 
Sorry, I don't understand this.

> I am happy to try out alternative ways if you have concrete suggestions
> on how to refactor the d/rules file
I'd suggest starting from scratch.

-- 
WBR, wRAR

Attachment: signature.asc
Description: PGP signature