Global LDFLAGS are not honored anymore by libraries/libapparmor/swig/python/Makefile.am
Presumably since 88c81d7b, the LDFLAGS
set for the build are not honored anymore.
$ blhc ../apparmor_3.0.0-1_amd64-2020-10-25T10:51:22Z.build
LDFLAGS missing (-Wl,-z,relro -Wl,-z,now): gcc -shared -L/usr/lib/python3.9/config-3.9-x86_64-linux-gnu -L/usr/lib -lcrypt -lpthread -ldl -lutil -lm -lm -I/usr/include/python3.9 -I/usr/include/python3.9 -Wall -Wsign-compare -Wmissing-field-initializers -Wformat -Wformat-security -Wunused-parameter -Wimplicit-fallthrough -Wdate-time -D_FORTIFY_SOURCE=2 build/temp.linux-x86_64-3.9/libapparmor_wrap.o -o build/lib.linux-x86_64-3.9/LibAppArmor/_LibAppArmor.cpython-39-x86_64-linux-gnu.so -L../../src/.libs -lapparmor
LDFLAGS missing (-Wl,-z,relro -Wl,-z,now): gcc -shared -L/usr/lib/python3.8/config-3.8-x86_64-linux-gnu -L/usr/lib -lcrypt -lpthread -ldl -lutil -lm -lm -I/usr/include/python3.8 -I/usr/include/python3.8 -Wall -Wsign-compare -Wmissing-field-initializers -Wformat -Wformat-security -Wunused-parameter -Wimplicit-fallthrough -Wdate-time -D_FORTIFY_SOURCE=2 build/temp.linux-x86_64-3.8/libapparmor_wrap.o -o build/lib.linux-x86_64-3.8/LibAppArmor/_LibAppArmor.cpython-38-x86_64-linux-gnu.so -L../../src/.libs -lapparmor
Lintian confirms that the resulting _LibAppArmor.cpython-38-x86_64-linux-gnu.so
and _LibAppArmor.cpython-39-x86_64-linux-gnu.so
binaries lack the "bindnow" linker flag.
For the time being I'm going to revert that commit in Debian.