P: strap source: unversioned-copyright-format-uri http://dep.debian.net/deps/dep5/ N: N: Format URI of the machine-readable copyright file is not versioned. N: N: Please use N: http://www.debian.org/doc/packaging-manuals/copyright-format// N: as the format URI instead. N: N: Refer to N: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for N: details. N: N: Severity: pedantic, Certainty: possible N: N: Check: source-copyright, Type: source N: W: strap: hardening-no-relro usr/lib/strap/nativeTools_unix2 N: N: This package provides an ELF binary that lacks the "read-only N: relocation" link flag. This package was likely not built with the N: default Debian compiler flags defined by dpkg-buildflags. If built using N: dpkg-buildflags directly, be sure to import LDFLAGS. N: N: Refer to http://wiki.debian.org/Hardening for details. N: N: Severity: normal, Certainty: certain N: N: Check: binaries, Type: binary, udeb N: W: strap: hardening-no-fortify-functions usr/lib/strap/nativeTools_unix2 N: N: This package provides an ELF binary that lacks the use of fortified libc N: functions. Either there are no potentially unfortified functions called N: by any routines, all unfortified calls have already been fully validated N: at compile-time, or the package was not built with the default Debian N: compiler flags defined by dpkg-buildflags. If built using N: dpkg-buildflags directly, be sure to import CPPFLAGS. N: N: NB: Due to false-positives, Lintian ignores some unprotected functions N: (e.g. memcpy). N: N: Refer to http://wiki.debian.org/Hardening and N: http://bugs.debian.org/673112 for details. N: N: Severity: normal, Certainty: possible N: N: Check: binaries, Type: binary, udeb N: P: strap: no-upstream-changelog N: N: The package does not install an upstream changelog file. If upstream N: provides a changelog, it should be accessible as N: /usr/share/doc//changelog.gz. N: N: It's currently unclear how best to handle multiple binary packages from N: the same source. Some maintainers put a copy of the upstream changelog N: in each package, but it can be quite long. Some include it in one N: package and add symlinks to the other packages, but this requires there N: be dependencies between the packages. Some only include it in a N: "central" binary package and omit it from more ancillary packages. N: N: Refer to Debian Policy Manual section 12.7 (Changelog files) for N: details. N: N: Severity: pedantic, Certainty: wild-guess N: N: Check: changelog-file, Type: binary N: