Ubuntu
dpkg package

dpkg-buildflags: emit build flags for negated features

Bug #2049686 reported by Matthias Klose
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
dpkg (Ubuntu)
Fix Released
High
Ubuntu Security Team

Bug Description

we have in a package:

export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-fortify

however that doesn't turn off fortify. We have these unfortunate defaults in the compiler, so we have to emit explicit compiler flags to disable these.

not just for that feature, but for any feature that is turned on by default in GCC.

See original description
Matthias Klose (doko)
Changed in dpkg (Ubuntu):
status: New → Confirmed
importance: Undecided → High
assignee: nobody → Ubuntu Security Team (ubuntu-security)
tags: added: rls-nn-incoming
description: updated
Revision history for this message
Julian Andres Klode (juliank) wrote :

doko, I'm confused by the assignment and tag, this does seem like something we should do (incoming makes sense) but why then assign it security team?

Revision history for this message
Matthias Klose (doko) wrote :

my understanding is, based on our discussions at the sprint in November, that the security team is responsible for preparing and handling additions of these hardening flags. At least that is what I understood.

Revision history for this message
Mark Esler (eslerm) wrote :

In Riga Security and Foundations agreed to SE058. This work fits under Security's responsibility to "Write patches for gcc and dpkg enablement".

The packaging structure of gcc-* is quirky, and I would appreciate training and guidance from the toolchains team to help bootstrap my team.

Revision history for this message
Mark Esler (eslerm) wrote :

doko addressed this in https://launchpad.net/ubuntu/+source/dpkg/1.22.2ubuntu3

Thank you \o/

Julian Andres Klode (juliank)
tags: removed: rls-nn-incoming
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package dpkg - 1.22.4ubuntu3

---------------
dpkg (1.22.4ubuntu3) noble; urgency=medium

  * Fix testsuite by avoiding uninitialization errors on armhf.

 -- Gianfranco Costamagna <email address hidden> Thu, 15 Feb 2024 14:59:50 +0100

Changed in dpkg (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.