[pkg-sec] Help with CFLAGS/LDFLAGS on t50

Gianfranco Costamagna locutusofborg at debian.org
Tue Jun 20 08:33:06 UTC 2017


Hello,

>blhc shows me:
>CFLAGS missing (-fPIE)
>LDFLAGS missing (-fPIE -pie)


bug in blhc.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845339

pie is already exported in the default gcc flags, so even if not visible in the buildlog, it is used.

>d/rules already exports hardening=+all and i can't seem to find where t50 is messing up with these variables, i would be greatly thankful if someone could point me out what i'm missing.
>Marcos: Please have a look at these patch[1], i saw that you removed a similar one recently but we still needed it to handle CFLAGS.


I would say, unless you explicitly set -fno-pie you can just ignore it.


G.



More information about the Pkg-security-team mailing list