[hardening-discuss] cmake vs DEB_BUILD_HARDENING vs 64-bit

Pierre Chifflier p.chifflier at inl.fr
Tue Apr 15 18:27:24 UTC 2008


On Mon, Apr 14, 2008 at 01:04:34PM -0700, Kees Cook wrote:
> Hi Pierre,
> 
> On Mon, Apr 14, 2008 at 09:25:08AM -0700, Kees Cook wrote:
> > This seems to be a bug in the hardening-wrapper.  Cmake is doing
> > builds in a way that wasn't expected (i.e. passing -fPIC during
> > an executable build, which disables PIE at the compiler level,
> > but the linker will still attempt to do it).  While I think cmake
> 
> I've fixed hardening-wrapper to behave better with cmake (or rather,
> with unexpected -fPIC flags).  Thanks for providing an easy test-case
> for this.  :)
> 
> hardening-wrapper 1.10 should work with cmake now.
> 

Hi,

It indeed works (tested with hardening-wrapper 1.11).

Thank you !

Pierre



More information about the hardening-discuss mailing list