Re: [RFC PATCH] dpkg-buildflags: Switch to -fstack-protector-strong

[Moritz Muehlenhoff <jmm@inutil.org>]

On Wed, Jun 25, 2014 at 07:29:09PM -0400, Michael Gilbert wrote:
> On Tue, Jun 24, 2014 at 10:11 AM, Kees Cook wrote:
> > On Tue, Jun 24, 2014 at 11:29:31AM +0200, Romain Francoise wrote:
> >> Hi,
> >>
> >> GCC 4.9 supports a new stack protector implementation, enabled via the
> >> -fstack-protector-strong flag, which provides a better balance between
> >> security and performance than the default implementation that we're
> >> currently using. This new flag is already used by Fedora 20 and
> >> ChromeOS. See the following for more information:

While we're at it: 
Kees, are there other toolchain flags you use in ChromeOS which might be
suitable candidates for Debian (after running archive rebuilds etc)?

Cheers,
        Moritz