From: Ian Jackson Date: Tue, 4 Feb 2020 14:16:39 +0000 (+0000) Subject: debian/rules: Improve comment about hardening options X-Git-Tag: archive/raspbian/4.14.0+80-gd101b417b7-1+rpi1^2~66 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=85a09de872d257a2a7750fcba71fe62c116a1b04;p=xen.git debian/rules: Improve comment about hardening options Closes: #939560 (2/3) Reported-by: Guillem Jover Signed-off-by: Ian Jackson --- diff --git a/debian/rules b/debian/rules index fdf68805b4..8f36229c1d 100755 --- a/debian/rules +++ b/debian/rules @@ -7,9 +7,9 @@ SHELL := bash -e # This influences dpkg-buildflags to specify better linker # options. See https://wiki.debian.org/Hardening -# TBH it is not clear to me (Diziet, 2018) why this is not the -# default but it is definitely appropriate for Xen, many of whose -# users will care significantly about security.x +# Apparently some of these might incur silent breakage +# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939560#5 +# but we don't think this is relevant to us. # # Note that we don't use the dpkg-buildflags output for the # hypervisor build. This because I haven't investigated which