Hello,

On 7/10/13 2:06 AM, Victor Seva wrote:

Hello,

I have a bugreport[0] about hardening [1] and how I try to pass this flags to the build system [2][3]

Is there any proper way to configure this flags? Should I try to modify the Makefile.def for use the environment flags and not clean their values?

probably using X+=... is the way to go instead of X=... for all those variables that is needed to get values from environment.

Cheers, Daniel

Cheers, Victor

[0] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690396 [1] http://wiki.debian.org/Hardening [2] configure phase: configure: configure-stamp configure-stamp: dh_testdir # Add here commands to configure the package. $(MAKE) FLAVOUR=kamailio cfg prefix=/usr cfg_prefix=$(CURDIR)/debian/kamailio \ cfg_target=/etc/kamailio/ \ basedir=$(CURDIR)/debian/kamailio \ skip_modules="$(EXCLUDED_MODULES) $(EXTRA_EXCLUDED_MODULES)" \ $(shell dpkg-buildflags --export=configure) \ group_include="kstandard" quiet=verbose

     touch configure-stamp

[3] $(shell dpkg-buildflags --export=configure) output: CFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security" CPPFLAGS="-D_FORTIFY_SOURCE=2" CXXFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security" FFLAGS="-g -O2" LDFLAGS="-Wl,-z,relro"

---

sr-dev mailing list sr-dev@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev