Re: Enabling hardened build flags for Wheezy

[Charles Plessy <plessy@debian.org>]

Le Wed, Mar 07, 2012 at 01:05:50AM +0100, Arno Töll a écrit :
> 
> On 07.03.2012 00:58, Charles Plessy wrote:
> > Would it be possible to pass -D_FORTIFY_SOURCE=2 in CFLAGS in 
> > addition to CPPFLAGS ?
> 
> Actually dpkg did in 1.16.1 which was reverted later (for good
> reasons). See #643632 for details.

Thanks (and thanks Cyril) for the hint.  Still there are two things
I do not understand:

 - Why and when it is a problem to add preprocessor flags in CFLAGS.

 - Why we chose the solution that require more extensive changes
   to the packages.

-- 
Cheers