[Pkg-security-team] [t50] 02/05: Remove -pie explicit flag It is already passed as hardening+=all.
Raphael Hertzog
hertzog at debian.org
Fri Aug 26 07:18:23 UTC 2016
Hello Samuel,
On Fri, 26 Aug 2016, Samuel Henrique wrote:
> commit a98efd4f46277440150dfb992165e7af714a7477
> Author: Samuel Henrique <samueloph at gmail.com>
> Date: Thu Aug 25 22:11:50 2016 -0300
>
> Remove -pie explicit flag
> It is already passed as hardening+=all.
Please respect the git conventions to format git commit logs.
One line summary. One empty line. Then a long description.
> -export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-pie
> +export DEB_BUILD_MAINT_OPTIONS = hardening=+all
Then I believe this commit to be wrong, or at least your description is
wrong.
"-pie" disables -fPIE while "+all" enables it... so it's not redundant,
that was the correct syntax to say "enable everything except -fPIE".
But if it works with -fPIE then there's no reason to disable it for sure.
I did not check that.
Cheers,
--
Raphaël Hertzog ◈ Debian Developer
Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
More information about the Pkg-security-team
mailing list