Rebuild Todo List hardening-wrapper removal
July 10, 2017 - Bartłomiej Piotrowski
With recent changes in toolchain, it is feasible to replace hardening-wrapper with simple rebuild against testing (with testing/devtools installed). The major differences are lack of -fstack-check (which is not enough to prevent stack clashes without full distro rebuild) and no enforcement of full RELRO if LDFLAGS are ignored.
Remove hardening-wrapper from makedepends and run checksec on both old and rebuild packages to see if there is any regression. If yes, it means that build system should be patched to reflect out LDFLAGS instead; otherwise push packages to stable repositories and mark them as done.
Filter Todo List Packages
| Arch | Repository | Name | Current Version | Staging Version | Maintainers | Status | Last Touched By |
|---|---|---|---|---|---|---|---|
| x86_64 | Extra | ffmpeg | 2:7.1-3 | alucryd | Complete | alucryd | |
| x86_64 | Extra | ffmpeg2.8 | Complete | alucryd | |||
| x86_64 | Extra | ghostscript | 10.04.0-1 | andyrtr | Complete | andyrtr | |
| x86_64 | Extra | gpsd | 3.25-5 | jlichtblau, arojas | Complete | anthraxx | |
| x86_64 | Extra | libunrar | 1:7.1.1-1 | arojas | Complete | arojas | |
| x86_64 | Extra | nginx | 1.26.2-1 | mtorromeo, anthraxx, grazzolini | Complete | bpiotrowski | |
| x86_64 | Extra | python2 | Complete | felixonmars | |||
| x86_64 | Extra | unrar | 1:7.1.1-1 | arojas | Complete | arojas |