Hello,
I have a bugreport[0] about hardening [1] and how I try to pass this
flags to the build system [2][3]
Is there any proper way to configure this flags? Should I try to
modify the Makefile.def for use the environment flags and not clean
their values?
Cheers,
Victor
[0]
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690396
[1]
http://wiki.debian.org/Hardening
[2] configure phase:
configure: configure-stamp
configure-stamp:
dh_testdir
# Add here commands to configure the package.
$(MAKE) FLAVOUR=kamailio cfg prefix=/usr
cfg_prefix=$(CURDIR)/debian/kamailio \
cfg_target=/etc/kamailio/ \
basedir=$(CURDIR)/debian/kamailio \
skip_modules="$(EXCLUDED_MODULES)
$(EXTRA_EXCLUDED_MODULES)" \
$(shell dpkg-buildflags --export=configure) \
group_include="kstandard" quiet=verbose
touch configure-stamp
[3] $(shell dpkg-buildflags --export=configure) output:
CFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security" CPPFLAGS="-D_FORTIFY_SOURCE=2" CXXFLAGS="-g
-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security" FFLAGS="-g -O2" LDFLAGS="-Wl,-z,relro"