This file is indexed.

/usr/share/bls-standalone/W-compiler-flags-hidden.description is in bls-standalone 0.20151231.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
## Since: 7
<p>The package contains build commands which hide the real compiler flags
(non-verbose builds). This prevents automatic checks for missing (hardening)
flags.</p>

<p>False positives are possible, especially when building in parallel. In
this case this warning can be ignored.</p>

<p>This warning was generated by <a
href="http://ruderich.org/simon/blhc/">blhc</a>, see the link for more
information and limitations. Run it manually on the build log to get more
detailed information. Please report false positives/negatives and other bugs
in blhc.</p>

<p>See the following links for more information about hardening:</p>

<ul>
    <li><a href="https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags">https://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags</a></li>
    <li><a href="https://wiki.debian.org/HardeningWalkthrough">https://wiki.debian.org/HardeningWalkthrough</a></li>
    <li><a href="https://wiki.debian.org/Hardening">https://wiki.debian.org/Hardening</a></li>
</ul>