debian/rules: Improve comment about hardening options

Closes: #939560 (2/3)
Reported-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Ian Jackson <ian.jackson@citrix.com>

diff --git a/debian/rules b/debian/rules
index fdf68805b477bceb291b320d0db59fe7f683ce7a..8f36229c1d6dc811b709829f803c0f706a78adf0 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -7,9 +7,9 @@ SHELL    := bash -e
 
 # This influences dpkg-buildflags to specify better linker
 # options.  See https://wiki.debian.org/Hardening
-# TBH it is not clear to me (Diziet, 2018) why this is not the
-# default but it is definitely appropriate for Xen, many of whose
-# users will care significantly about security.x
+# Apparently some of these might incur silent breakage
+#   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939560#5
+# but we don't think this is relevant to us.
 #
 # Note that we don't use the dpkg-buildflags output for the
 # hypervisor build.  This because I haven't investigated which