From 85a09de872d257a2a7750fcba71fe62c116a1b04 Mon Sep 17 00:00:00 2001 From: Ian Jackson Date: Tue, 4 Feb 2020 14:16:39 +0000 Subject: [PATCH] debian/rules: Improve comment about hardening options Closes: #939560 (2/3) Reported-by: Guillem Jover Signed-off-by: Ian Jackson --- debian/rules | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/debian/rules b/debian/rules index fdf68805b4..8f36229c1d 100755 --- a/debian/rules +++ b/debian/rules @@ -7,9 +7,9 @@ SHELL := bash -e # This influences dpkg-buildflags to specify better linker # options. See https://wiki.debian.org/Hardening -# TBH it is not clear to me (Diziet, 2018) why this is not the -# default but it is definitely appropriate for Xen, many of whose -# users will care significantly about security.x +# Apparently some of these might incur silent breakage +# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939560#5 +# but we don't think this is relevant to us. # # Note that we don't use the dpkg-buildflags output for the # hypervisor build. This because I haven't investigated which -- 2.30.2