[Bug 1000379] [NEW] compiler hardening options not working

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Ubuntu Foundation's Bug Bot (crichton):

The debian/rules file has an attempt to enable compiler hardening
options, but it isn't working.  I have verified this against the latest
package source here on launchpad.  The problem is that LDFLAGS is set to
the wrong value.  This can be seen with the checksec.sh output below
(run after building the current latest source):

RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      FILE
Partial RELRO   Canary found      NX enabled    No PIE          No RPATH   No RUNPATH   debian/nagios-nrpe-server/usr/sbin/nrpe

The attached patch fixes this problem.  Here is the checksec.sh output
after the patch is applied:

RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      FILE
Full RELRO      Canary found      NX enabled    PIE enabled     No RPATH   No RUNPATH   debian/nagios-nrpe-server/usr/sbin/nrpe

** Affects: nagios-nrpe (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: patch
-- 
compiler hardening options not working
https://bugs.launchpad.net/bugs/1000379
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.