Bug#552688: Please decide how Debian should enable hardening build flags
On Fri, 29 Jul 2011, Steve Langasek wrote:
> On Tue, Jul 26, 2011 at 11:32:27PM +0200, Raphael Hertzog wrote:
> > TODO: add a "STRIP" operation to the set of operations supported by
> > dpkg-buildflags. DEB_CFLAGS_MAINT_STRIP="--foo --bar" would basically
> > drop all occurrences of --foo and --bar in the returned build flags.
>
> > QUESTION: Is this ok to assume that all build flags can be "delimited"
> > by a space character?
>
> Counterexample: -Wl,-z -Wl,defs
>
> While this *can* also be written as -Wl,-z,defs, I'm not sure there's any
> way to guarantee it will be?
Well, the point of the "strip" operation is to drop the build flags we're
injecting by default so as long as we're able to write all flags that
we're injecting in a way that doesn't require the use of the space, we
should be fine.
Cheers,
--
Raphaël Hertzog ◈ Debian Developer
Follow my Debian News ▶ http://RaphaelHertzog.com (English)
▶ http://RaphaelHertzog.fr (Français)
Reply to: