From d920305d9deb52fa7c1fb8b0f01bfc31cf517e41 Mon Sep 17 00:00:00 2001 From: Guillem Jover Date: Sun, 10 Sep 2017 16:18:15 +0200 Subject: dpkg-genbuildinfo: Add support for new Build-Kernel-Version field Packages intended to be built in a generic way must never rely on the currently running kernel on the build system (an exception could be an optimization rebuild using the current system as the reference baseline). But to be able to detect when a package might not be reproducible due to varying kernel information it is still useful to be able to record this information. Although that information can be very sensitive. When the builder has explicitly enabled the Build-Kernel-Version field with the new dpkg-genbuildinfo --always-include-kernel option, it will get included in the generated .buildinfo file. Closes: #873937 --- man/deb-buildinfo.man | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'man/deb-buildinfo.man') diff --git a/man/deb-buildinfo.man b/man/deb-buildinfo.man index 3b184241e..5013aa047 100644 --- a/man/deb-buildinfo.man +++ b/man/deb-buildinfo.man @@ -135,6 +135,12 @@ The date the package was built. It must be in the same format as the date in a \fBdeb\-changelog\fP(5) entry. .TP +.BR Build\-Kernel\-Version: " \fIbuild-kernel-version\fP" +The release and version (in an unspecified format) of the kernel running +on the build system. +This field is only going to be present if the builder has explicitly +requested it, to avoid leaking possibly sensitive information. +.TP .BR Build\-Path: " \fIbuild-path\fP" The absolute build path, which correspond to the unpacked source tree. This field is only going to be present if the vendor has whitelisted it -- cgit v1.2.3