[pkg-gnupg-maint] Bug#879014: gpgme1.0: FTBFS on some arches: Qt needs a compile with -fPIC (PIE is not enough), hardening downgrades to PIE

[Thorsten Glaser]

On Mon, 9 Mar 2020, Lisandro Damián Nicanor Pérez Meyer wrote:

> PIE implies PIE so (and here is what I miss wrote above) PIE should
> not be added if PIC was used.

PIC implies PIE ;)

> Moreover PIC is more suitable for libraries, so it should be the right
> choice here.

The problem is that applications linked against Qt also need PIC,
not PIE. The pkg-config stuff gets this right, but the continued
insisting that -specs= stuff should be used to enable PIE on some
architectures due to disagreements between dpkg and gcc maintainers
causes PIE, if enabled in hardening, to be added too late on the
compiler command line (and not ignored if PIC was already given).

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

**********

Mit der tarent Academy bieten wir auch Trainings und Schulungen in den
Bereichen Softwareentwicklung, Agiles Arbeiten und Zukunftstechnologien an.

Besuchen Sie uns auf www.tarent.de/academy. Wir freuen uns auf Ihren Kontakt.

**********