Bug#835146: dpkg: please enable bindow hardening flag by default

Hi! On Fri, 2022-06-17 at 16:04:27 +0200, Christian Göttsche wrote: > With LTO being considered to be enabled by default [1] can this please > also get another deliberation. If you want to see this enabled by default, please bring it up again on debian-devel. AFAIR last time there was push back.

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi, For the record I'm not working on this anymore. Feel free to either close the bug or pick the work up from here. IMO there is not much to worry about enabling bindnow since Ubuntu enabled it in 16.10. Cheers, Balint [1] https://wiki.ubuntu.com/ToolChain%20/CompilerFlags/#A-Wl.2C-z.2Cnow

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi all, PIE made it into Strech. But bindnow is still open even after it was activated for a short time (and packages were build with it). May I ask for the planning for Buster? Thanks in advance! Dr. Markus Waldeck

Bug#835146: dpkg: please enable bindow hardening flag by default

2016-12-19 1:07 GMT+01:00 Christian Hofstaedtler : > * Bálint Réczey [161219 00:06]: >> I have uploaded a fixed package with the attached patch to DELAYED/10. > > Given dpkg/1.18.16 has entered sid, your upload will likely fail... Yes, Guillem mentioned

Bug#835146: dpkg: please enable bindow hardening flag by default

* Bálint Réczey [161219 00:06]: > I have uploaded a fixed package with the attached patch to DELAYED/10. Given dpkg/1.18.16 has entered sid, your upload will likely fail... Best, -- christian hofstaedtler

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi Matthias, 2016-12-14 15:09 GMT+01:00 Matthias Klose : > On 14.12.2016 13:58, Bálint Réczey wrote: >> Hi All, >> >> 2016-11-06 13:20 GMT+01:00 Bálint Réczey : >>> Hi Guillem, >>> >>> 2016-10-27 23:49 GMT+02:00 Bálint Réczey :

Bug#835146: dpkg: please enable bindow hardening flag by default

On 14.12.2016 13:58, Bálint Réczey wrote: > Hi All, > > 2016-11-06 13:20 GMT+01:00 Bálint Réczey : >> Hi Guillem, >> >> 2016-10-27 23:49 GMT+02:00 Bálint Réczey : >>> Hi, >>> >>> 2016-10-26 13:46 GMT+02:00 Bálint Réczey :

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi All, 2016-11-06 13:20 GMT+01:00 Bálint Réczey : > Hi Guillem, > > 2016-10-27 23:49 GMT+02:00 Bálint Réczey : >> Hi, >> >> 2016-10-26 13:46 GMT+02:00 Bálint Réczey : >>> Hi, >>> >>> 2016-10-26 5:00 GMT+02:00 Guillem Jover

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi Guillem, 2016-10-27 23:49 GMT+02:00 Bálint Réczey : > Hi, > > 2016-10-26 13:46 GMT+02:00 Bálint Réczey : >> Hi, >> >> 2016-10-26 5:00 GMT+02:00 Guillem Jover : >>> Hi! >>> >>> On Thu, 2016-10-20 at 03:20:59 +0200, Bálint

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi, 2016-10-26 13:46 GMT+02:00 Bálint Réczey : > Hi, > > 2016-10-26 5:00 GMT+02:00 Guillem Jover : >> Hi! >> >> On Thu, 2016-10-20 at 03:20:59 +0200, Bálint Réczey wrote: >>> For the record gcc-6/6.2.0-7 enabled bindnow for the architectures >>> where

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi, 2016-10-26 5:00 GMT+02:00 Guillem Jover : > Hi! > > On Thu, 2016-10-20 at 03:20:59 +0200, Bálint Réczey wrote: >> For the record gcc-6/6.2.0-7 enabled bindnow for the architectures >> where PIE is enabled by default. I think enabling bindnow from dpkg >> would be better

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi! On Thu, 2016-10-20 at 03:20:59 +0200, Bálint Réczey wrote: > For the record gcc-6/6.2.0-7 enabled bindnow for the architectures where > PIE is enabled by default. I think enabling bindnow from dpkg would be > better through the hardening flags because packages could disable it > in a nicer

Bug#835146: dpkg: please enable bindow hardening flag by default

Hi Guillem, For the record gcc-6/6.2.0-7 enabled bindnow for the architectures where PIE is enabled by default. I think enabling bindnow from dpkg would be better through the hardening flags because packages could disable it in a nicer and already established way. Cheers, Balint 2016-10-10

Bug#835146: dpkg: please enable bindow hardening flag by default

Dear Guillem, On Tue, 23 Aug 2016 00:14:25 +0200 Balint Reczey wrote: ... > Dear Guillem, > > As a continuation of the discussions [1][2] on debian-devel I'm > attaching the simple patch that implements enabling the bindnow > hardening flags. > > I'm continuing with the

Bug#835146: dpkg: please enable bindow hardening flag by default

Package: dpkg Version: 1.18.10 Severity: wishlist Tags: patch moreinfo Dear Guillem, As a continuation of the discussions [1][2] on debian-devel I'm attaching the simple patch that implements enabling the bindnow hardening flags. I'm continuing with the rebuild/autopkgtest tests according to