[Bug 1576915] Re: dpkg-buildflags should explicitly pass -fno-PIE and -no-pie if DEB_BUILD_{MAINT_, }OPTIONS=hardening=-pie is set

dino99 1576915 at bugs.launchpad.net
Wed May 18 16:38:48 UTC 2016


Some more comment:

the ubuntu kenel team have teached the compiler to take care of that
issue directly; so it seems 'dkms' task opened here can be dropped too
now.

 * Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not
    supported by compiler (LP: #1574982)
    - SAUCE: (no-up) disable -pie when gcc has it enabled by default

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1576915

Title:
  dpkg-buildflags should explicitly pass -fno-PIE and -no-pie if
  DEB_BUILD_{MAINT_,}OPTIONS=hardening=-pie is set

Status in dpkg package in Ubuntu:
  Confirmed
Status in dpkg package in Debian:
  New

Bug description:
  now with the default to pie, dpkg-buildflags should explicitly pass
  -fno-PIE and -no-pie if DEB_BUILD_HARDENING_PIE=0 is set

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1576915/+subscriptions



More information about the foundations-bugs mailing list