Re: Bug#552688: Please decide how Debian should enable hardening build flags

[Jonathan Nieder <jrnieder@gmail.com>]

Hi,

Raphael Hertzog wrote:

> We have dpkg-buildflags available but few packages are using it and it's
> unlikely they will be all converted in the wheezy timeframe.

I agree with the precise meaning of this statement, but the spirit seems
quite wrong.  For the packages I am involved in (not many), I have
deliberately not used dpkg-buildflags to make backporting easier.
It is a new facility but a very good one, and I suspect that it will
be adopted fairly quickly, especially if someone writes the appropriate
patches to debian/rules (or even better, writes a program maintainers
can use to automate this).

Also, I am not the GCC maintainer, but from experience of receiving
reports from people building software with Ubuntu, I think changing
the defaults in GCC is quite wrong.

Just my two cents.
Jonathan