[debian-devel:18999] Re: 【セミ ナ確定】東京エリア Debian勉強会(2015 年6月勉強会 )

2015-06-27 ()  18:21 +0900  Hideki Yamane :
> On Wed, 24 Jun 2015 10:24:17 +0900
> Takahide Nojima <[email protected]> wrote:
> > contribDFSG
> > non-free
> > /
> > 
> 
> DSA main 



contribnon-free
main


faq
https://www.debian.org/security/faq#contrib
contrib/non-free

 
If it is possible to fix the
problem, and the package maintainer or someone else provides correct
updated packages, then the security team will generally process them
and release an advisory.

non-freeDSA
https://www.debian.org/security/2015/dsa-3274
faqnon-freeDSA
OK



contrib  non-free




contrib  non-free 


OK

> > > GPG
> > 
> > 
> > 
> 
> 
> GPG
> (*)
> 
> *) 
> 






Step1. [email protected] [email protected]

GPGpublic key



Step2. public key
Step3. 

...?

> > 
> > 
> > 
> > -fstack-protector-strong -Wformat -Werror=format-security -D
> > _FORTIFY_SOURCE=2
> > Hardening
> > 
> > dpkg-buildflags
> > ..(-fPIC
> 
> debian/rules
> dpkg-buildflags
> - dpkg-buildflags 
> - 
> 
> 



> debian/rules
> export DEB_BUILD_MAINT_OPTIONS := hardening=+all
> relrobindnow,pie
> 
> relroenable


 GOT (.dtors) overwrite attacks

-fPICALSR