[Bug 1000379] Re: compiler hardening options not working

[Ubuntu Foundation's Bug Bot]

The attachment "nagios-nrpe_2.12-6ubuntu2.patch" of this bug report has
been identified as being a patch in the form of a debdiff.  The ubuntu-
sponsors team has been subscribed to the bug report so that they can
review and hopefully sponsor the debdiff.  In the event that this is in
fact not a patch you can resolve this situation by removing the tag
'patch' from the bug report and editing the attachment so that it is not
flagged as a patch.  Additionally, if you are member of the ubuntu-
sponsors team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by
Brian Murray.  Please contact him regarding any issues with the action
taken in this bug report.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1000379

Title:
  compiler hardening options not working

Status in “nagios-nrpe” package in Ubuntu:
  New

Bug description:
  The debian/rules file has an attempt to enable compiler hardening
  options, but it isn't working.  I have verified this against the
  latest package source here on launchpad.  The problem is that LDFLAGS
  is set to the wrong value.  This can be seen with the checksec.sh
  output below (run after building the current latest source):

  RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      FILE
  Partial RELRO   Canary found      NX enabled    No PIE          No RPATH   No RUNPATH   debian/nagios-nrpe-server/usr/sbin/nrpe

  The attached patch fixes this problem.  Here is the checksec.sh output
  after the patch is applied:

  RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      FILE
  Full RELRO      Canary found      NX enabled    PIE enabled     No RPATH   No RUNPATH   debian/nagios-nrpe-server/usr/sbin/nrpe

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nagios-nrpe/+bug/1000379/+subscriptions