[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: release goal proposal: enable hardening build flags



Andreas Metzler <ametzler@downhill.at.eu.org> schrieb:
> In gmane.linux.debian.devel.general Kees Cook <kees@debian.org> wrote:
>> I would like to propose a release goal of enabling hardening build flags[1]
>> for all C/C++ packages in the archive[2]. For Wheezy, specific sub-goals are
>> being chosen.
> [...]
>
> Hello,
> Is there any point in still using hardening-wrapper if a package properly
> uses default compiler options provided by dpkg-buildflags? 

No, switching to dpkg-buildflags is preferred since it allows changing the
standard build flags in one central place.

Cheers,
        Moritz


Reply to: