Re: [RFC] Enabling bindnow by default in dpkg-buildflags?
Simon McVittie <smcv@debian.org> writes:
> (I'm not entirely sure why we consider hardening packaged code to be so
> much more important than hardening the locally-built code compiled by
> our users, which changed compiler defaults like those in Ubuntu
> would also give us.)
I think you might have this in reverse. The hardening changes can also
cause problems, and we consider not breaking locally built code more
important than not breaking packaged code (which is much easier for us
to fix).
--
Arto Jantunen
Reply to: