On Wednesday 01 June 2016 14:29:38 Gianfranco Costamagna wrote: > Hi, > > >I am ignorant of PIE issues. Can you tell me if this patch should enter > > > >Debian? > > the issue is: PIE has to be disabled, because it breaks libraries. > It is *actually* disabled in Debian, but not in Ubuntu, where it has been > enabled by default in the compiler itself (some architectures, not all)
Forgive my ignorance, but isn't it enabled when hardening flags are turned on? DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get CFLAGS -g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security Best, Gard
