Hi Vincent, 2016-10-03 21:15 GMT+02:00 Vincent Danjean <vdanjean...@free.fr>: > Le 28/09/2016 à 21:59, Balint Reczey a écrit : >> Control: tags -1 patch pending > > [...] > +export DEB_CFLAGS_MAINT_APPEND = -fPIC > [...] > > Why only enabling -fPIC? If the package is modified, won't it > be better to enable hardening?
I have not enabled the extra flags because I hope that those will become default. :-) https://wiki.debian.org/Hardening/PIEByDefaultTransition > Note that I do not know the package, so I do not know if there > is performance impact or other side effects (as for -fPIC). There is a minor performance impact but I believe no one will notice it. Cheers, Balint