=== JanC_ is now known as JanC | ||
ahasenack | hi #security, I just realized that nfs-utils (nfs server/client) is not built with hardening flags: https://pastebin.ubuntu.com/p/8xYGBmjwVd/ | 13:45 |
---|---|---|
ahasenack | do you recall any specific reason for it? These warnings are all about the userspace bits in libnfsidmap and its plugins | 13:46 |
ahasenack | it's like this in debian | 13:46 |
ahasenack | I wonder if the previous src:libnfsidmap was built like that too | 13:53 |
* ahasenack checks | 13:53 | |
teward | *hands ahasenack the coffee they'll obviously need* | 13:53 |
teward | :P | 13:53 |
teward | (enjoy the rabbit hole) | 13:53 |
ahasenack | export DEB_BUILD_MAINT_OPTIONS = hardening=+all <-- it was there | 13:53 |
ahasenack | so we lost it when the libnfsidmap source was absorbed by nfs-utils | 13:53 |
sarnold | ahasenack: nice find :) weird though :( | 18:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!