Please sync hardening-wrapper 1.9 (universe) from Debian unstable (main).

[Kees Cook]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/hardening-wrapper
 status confirmed
 importance wishlist
 subscribe ubuntu-archive

Please sync hardening-wrapper 1.10 (universe) from Debian unstable (main).

This will help fix a certain class of build-failures when attempting PIE
builds, most notably for cmake-based builds, and other similar packages.

Changelog since current hardy version 1.8:

hardening-wrapper (1.10) unstable; urgency=low

  * hardened-cc, hardened-ld: re-arranged logic for "-pie". Old logic
    was resulting in failed compiles under cmake.
  * tests/Makefile: moved debian/rules tests into separate directory,
    added -fPIC test cases, based on issues uncovered by cmake.
  * debian/rules: disabled stack protector on mips, hppa -- not supported.

 -- Kees Cook <email address hidden> Mon, 14 Apr 2008 11:15:35 -0700

hardening-wrapper (1.9) unstable; urgency=low

  * debian/rules:
    - disable stack protector on arm, armel.
    - disable PIE on arm, armel (thanks to Riku Voipio, Closes: 475764).
    - show readelf output on test builds.
    - fully link by tricking gcc into running the ld test wrapper.
  * hello.c: re-arranged to exercise stack protector, report PIE.
  * hardened-ld: add env var way to force use of /usr/bin/ld during tests.

 -- Kees Cook <email address hidden> Sun, 13 Apr 2008 18:01:38 -0700

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD4DBQFIA/KwH/9LqRcGPm0RAv6iAJ976ycxr2qI1vxPaO1TnxAKBgO2zgCY+1xY
3eVhZcye2JVxUC1tluJKtw==
=eO3j
-----END PGP SIGNATURE-----

[Kees Cook (kees)]

1.11 is coming shortly, nevermind on this, sorry for the noise.