Re: Enabling hardened build flags for Wheezy
Le Wed, Mar 07, 2012 at 01:05:50AM +0100, Arno Töll a écrit :
> On 07.03.2012 00:58, Charles Plessy wrote:
> > Would it be possible to pass -D_FORTIFY_SOURCE=2 in CFLAGS in
> > addition to CPPFLAGS ?
> Actually dpkg did in 1.16.1 which was reverted later (for good
> reasons). See #643632 for details.
Thanks (and thanks Cyril) for the hint. Still there are two things
I do not understand:
- Why and when it is a problem to add preprocessor flags in CFLAGS.
- Why we chose the solution that require more extensive changes
to the packages.