Rebuild Todo List hardening-wrapper removal

July 10, 2017 - Bartłomiej Piotrowski

With recent changes in toolchain, it is feasible to replace hardening-wrapper with simple rebuild against testing (with testing/devtools installed). The major differences are lack of -fstack-check (which is not enough to prevent stack clashes without full distro rebuild) and no enforcement of full RELRO if LDFLAGS are ignored.

Remove hardening-wrapper from makedepends and run checksec on both old and rebuild packages to see if there is any regression. If yes, it means that build system should be patched to reflect out LDFLAGS instead; otherwise push packages to stable repositories and mark them as done.

Link to lists of pkgbase values:

Filter Todo List Packages

Select filter criteria
8 packages displayed out of 8 total packages.
Arch Repository Name Current Version Staging Version Maintainers Status Last Touched By
x86_64 Extra ffmpeg 2:7.0.2-3 2:7.1-1 alucryd Complete alucryd
x86_64 Extra ffmpeg2.8 Complete alucryd
x86_64 Extra ghostscript 10.04.0-1 andyrtr Complete andyrtr
x86_64 Extra gpsd jlichtblau, arojas Complete anthraxx
x86_64 Extra libunrar 1:7.0.9-1 arojas Complete arojas
x86_64 Extra nginx 1.26.2-1 mtorromeo, anthraxx, grazzolini Complete bpiotrowski
x86_64 Extra python2 Complete felixonmars
x86_64 Extra unrar 1:7.0.9-1 arojas Complete arojas