compiler flags hidden in log

[kartikm]

See: http://qa.debian.org/bls/packages/n/netsniff-ng.html for more details. Fixing this will help Debian's goal for hardening support.

[tklauser]

I'll have a look at it and try to fix it if appropriate. Thanks!

[tklauser]

If you build with `make Q=', does that fix the warning?

[tklauser]

Ping. @kartikm did you have a chance to test whether building with make Q= fixes the issue?

[kartikm]

Oops. I missed to test earlier, will do and update here.

[vkochan]

Yes, 'make Q=' showed the compiler flags.

[kartikm]

Uploading new version, so we will know in sometime about this. Sorry again for late heads up.

[tklauser]

Juding from the log at https://buildd.debian.org/status/fetch.php?pkg=netsniff-ng&arch=i386&ver=0.6.1-1&stamp=1461740187 it looks like the problem isn't solved yet. I guess you'll need the attached patch against debian/rules to make it work properly: pkg-netsniff-ng-compiler-flags-unhide.patch.txt

i.e. in the build-stamp target of debian/rules you'll need to use:

$(MAKE) Q= PREFIX=/usr ETCDIR=/etc

instead of:

$(MAKE) PREFIX=/usr ETCDIR=/etc

[kartikm]

We still have same result? https://qa.debian.org/bls/packages/n/netsniff-ng.html

[tklauser]

Strange. In the logs I can see them now: https://buildd.debian.org/status/fetch.php?pkg=netsniff-ng&arch=i386&ver=0.6.1-2&stamp=1461822277

Could it be that the echo -e ... && gcc confuses the build log parser?

[kartikm]

I'll check in details later during weekend. This isn't blocker/serious :)

[archey]

I have been watching this closely and I went ahead added the hardening flags to compile every tool in the netsniff-ng suite. It seems like every tool compiled correctly and linked except for mausezahn, here is the error:

usr/bin/ld: mausezahn/automops.o: relocation R_X86_64_32 against `.rodata.str1.8' can not be used when making a shared object; recompile with -fPIC

gcc (GCC) 5.3.0
Compilation flags:

CPPFLAGS="-D_FORTIFY_SOURCE=2"
CFLAGS="-march=x86-64 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
CXXFLAGS="-march=x86-64 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro"

Added -fPIC to CFLAGS and -z now -pie to LDFLAGS

Hope this with enabling hardening support on these packages.

If your need more output please let me know, I was able to gather this with make Q= as mentioned above.