Groups > linux.debian.maint.python > #14401

Lintian info message "hardening-no-bindnow" with vanilla debian/rules

Path	csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From	Julian Gilbey <jdg@debian.org>
Newsgroups	linux.debian.maint.python
Subject	Lintian info message "hardening-no-bindnow" with vanilla debian/rules
Date	Tue, 30 Aug 2022 10:00:01 +0200
Message-ID	<F04k9-43Jq-1@gated-at.bofh.it> (permalink)
X-Original-To	Debian Python list <debian-python@lists.debian.org>
X-Mailbox-Line	From debian-python-request@lists.debian.org Tue Aug 30 07:54:28 2022
Old-Return-Path	<julian@d-and-j.net>
X-Amavis-Spam-Status	No, score=-106.87 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
X-Debian-User	jdg
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/20239
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/Yw3CIBZK8kBBrp/n@d-and-j.net
Approved	robomod@news.nic.it
Lines	22
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Tue, 30 Aug 2022 08:54:08 +0100
X-Original-Message-ID	<Yw3CIBZK8kBBrp/n@d-and-j.net>
Xref	csiph.com linux.debian.maint.python:14401

Show key headers only | View raw

Hi!

A package I maintain within the team (python3-pyxdameraulevenshtein)
gives the following lintian message:

I: python3-pyxdameraulevenshtein: hardening-no-bindnow [usr/lib/python3/dist-packages/pyxdameraulevenshtein.cpython-310-x86_64-linux-gnu.so]

The debian/rules file is very bland, essentially:

%:
        dh $@ --buildsystem=pybuild

and there is nothing about CFLAGS or the like in the setup.py file.
So if having this hardening flag enabled is a good thing, it should
probably be enabled somewhere within the pybuild system, rather than
every individual package with an extension file doing it.

Or have I missed something?

Best wishes,

   Julian

Back to linux.debian.maint.python | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Lintian info message "hardening-no-bindnow" with vanilla debian/rules Julian Gilbey <jdg@debian.org> - 2022-08-30 10:00 +0200
  Re: Lintian info message "hardening-no-bindnow" with vanilla  debian/rules Gregor Riepl <onitake@gmail.com> - 2022-08-30 19:40 +0200
    Re: Lintian info message "hardening-no-bindnow" with vanilla  debian/rules Julian Gilbey <julian@d-and-j.net> - 2022-08-31 10:20 +0200

csiph-web