Community Packages

Please read this before reporting a bug:
http://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#71191 - [syncthing] Add FULL RELRO drop inetutils

Attached to Project: Community Packages
Opened by loqs (loqs) - Wednesday, 09 June 2021, 00:42 GMT
Last edited by Andreas Radke (AndyRTR) - Thursday, 10 June 2021, 18:49 GMT
Task Type Bug Report
Category Packages
Status Assigned
Assigned To Jaroslav Lichtblau (Dragonlord)
Architecture All
Severity Very Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Description:
syncthing lacks full relro as $LDFLAGS are not used by build.go. build.go will add flags from EXTRA_LDFLAGS.
Use of hostname was dropped in [1] v0.9.6+. The recorded hostname is set by the variable BUILD_HOST defined in the PKGBUILD.
[2] Uses EXTRA_LDFLAGS to set $LDFLAGS, drops inetutils. It also sets BUILD_USER to ${pkgbase} for increased reproducibility.
[3] An alternative approach, stops using build.go instead it invokes go build directly.

Additional info:
* syncthing 1.17.0-1
[1] https://github.com/syncthing/syncthing/commit/b221e4d4454285831444a02d332bc3deb2bf19a4
[2] PKGBUILD.diff.1
[3] PKGBUILD.diff.2
This task depends upon

Loading...