Hi. I download https://www.apache.org/dist/apr/apr-util-1.5.4.tar.bz2 unpack and configure:
export CFLAGS="-g -O0" export CXXFLAGS="" ./configure --prefix=/usr --with-apr=/usr --with-ldap --with-crypto \ --with-gdbm=/usr --with-sqlite3=/usr --with-nss=/usr --with-odbc=/usr \ --with-berkeley-db=/usr --with-pgsql=/usr --with-mysql=/usr --with-oracle=/usr \ --with-openssl=/usr after configure out of the blue the file ./build/rules.mk appears and it contains: # compilation and linking flags that are supposed to be set only by the user. # configure adds to them for tests, but we restore them at the end. # CFLAGS=-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong --param=ssp-buffer-size=4 CPPFLAGS=-D_FORTIFY_SOURCE=2 LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro I grepped the source tree for the phrase "compilation and linking flags", but it wasn't there. I also checked my "/usr/lib/pkgconfig" and "/usr/lib/httpd/build". I also tried to find the word "ssp-buffer-size" and couldn't find it. So where does this file come from? How to build apr-util without "_FORTIFY_SOURCE"? My last resort is to edit rules.mk after configure using sed, but I'm still curious.