Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 448016

Summary: app-misc/hardening-wrapper - New package. - Compiler wrapper to enable security hardening flags
Product: Gentoo Linux Reporter: Matthew Schultz <mattsch>
Component: New packagesAssignee: Default Assignee for New Packages <maintainer-wanted>
Status: UNCONFIRMED ---    
Severity: enhancement    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://packages.qa.debian.org/hardening-wrapper
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 448704    

Description Matthew Schultz 2012-12-20 21:27:33 UTC
Compiler wrapper to enable security hardening flags.

Reproducible: Always
Comment 1 Patrick Lauer gentoo-dev 2013-03-14 02:41:27 UTC
>>> Compiling source in /var/tmp/portage/app-misc/hardening-wrapper-2.3/work/hardening-wrapper ...
make -j4 
if [ -z "" ]; then echo No DEB_HOST_ARCH; exit 1; fi
No DEB_HOST_ARCH
make: *** [build-tree/stamp-build] Error 1
 * ERROR: app-misc/hardening-wrapper-2.3 failed (compile phase):
 *   emake failed
Comment 2 Matthew Schultz 2013-03-14 03:21:02 UTC
(In reply to comment #1)
> >>> Compiling source in /var/tmp/portage/app-misc/hardening-wrapper-2.3/work/hardening-wrapper ...
> make -j4 
> if [ -z "" ]; then echo No DEB_HOST_ARCH; exit 1; fi
> No DEB_HOST_ARCH
> make: *** [build-tree/stamp-build] Error 1
>  * ERROR: app-misc/hardening-wrapper-2.3 failed (compile phase):
>  *   emake failed

What do you get when you run this command?

dpkg-architecture -qDEB_HOST_ARCH
Comment 3 Matthew Schultz 2013-03-14 03:24:06 UTC
(In reply to comment #2)
> (In reply to comment #1)
> > >>> Compiling source in /var/tmp/portage/app-misc/hardening-wrapper-2.3/work/hardening-wrapper ...
> > make -j4 
> > if [ -z "" ]; then echo No DEB_HOST_ARCH; exit 1; fi
> > No DEB_HOST_ARCH
> > make: *** [build-tree/stamp-build] Error 1
> >  * ERROR: app-misc/hardening-wrapper-2.3 failed (compile phase):
> >  *   emake failed
> 
> What do you get when you run this command?
> 
> dpkg-architecture -qDEB_HOST_ARCH

Nevermind, apparently I'm missing a build dep.
Comment 4 Agostino Sarubbo gentoo-dev 2013-10-31 14:00:50 UTC
I recently have added hardening-check which is part of hardening-wrapper..
Comment 5 Matthew Schultz 2013-10-31 14:53:58 UTC
(In reply to Agostino Sarubbo from comment #4)
> I recently have added hardening-check which is part of hardening-wrapper..

I'm not sure how this is helpful.  It's missing several dependencies, lintian overrides, docs and it only installs hardening-check?  Why not just take my ebuild from sunrise and put that in portage?
Comment 6 Agostino Sarubbo gentoo-dev 2013-12-29 17:27:52 UTC
(In reply to Matthew Schultz from comment #5)
> (In reply to Agostino Sarubbo from comment #4)
> > I recently have added hardening-check which is part of hardening-wrapper..
> 
> I'm not sure how this is helpful.  It's missing several dependencies,
> lintian overrides, docs and it only installs hardening-check?  Why not just
> take my ebuild from sunrise and put that in portage?

Because I don't see how hardening-wrapper is useful since we have directly the hardened project. Hardening-check shows you what is active.
Comment 7 Matthew Schultz 2013-12-30 15:11:01 UTC
(In reply to Agostino Sarubbo from comment #6)
> (In reply to Matthew Schultz from comment #5)
> > (In reply to Agostino Sarubbo from comment #4)
> > > I recently have added hardening-check which is part of hardening-wrapper..
> > 
> > I'm not sure how this is helpful.  It's missing several dependencies,
> > lintian overrides, docs and it only installs hardening-check?  Why not just
> > take my ebuild from sunrise and put that in portage?
> 
> Because I don't see how hardening-wrapper is useful since we have directly
> the hardened project. Hardening-check shows you what is active.

I'll accept that as a reason for excluding the the other hardening programs but I would also like to know why you have several missing RDEPEND and one DEPEND dependencies as well as not including manpages, lintian files and docs?
Comment 8 Thomas Sachau gentoo-dev 2014-12-14 13:50:33 UTC
The ebuild in sunrise was outdated and unmaintained, so it got removed.