Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

2016-10-26 17:21 GMT+02:00 Bálint Réczey : > Hi, > > 2016-10-26 5:41 GMT+02:00 Guillem Jover : >> Hi! >> >> On Wed, 2016-10-26 at 05:08:52 +0200, Guillem Jover wrote: >>> On Wed, 2016-09-07 at 00:48:17 +0200, Bálint Réczey wrote: >>> > 2016-09-04 3:03

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi, 2016-10-26 5:41 GMT+02:00 Guillem Jover : > Hi! > > On Wed, 2016-10-26 at 05:08:52 +0200, Guillem Jover wrote: >> On Wed, 2016-09-07 at 00:48:17 +0200, Bálint Réczey wrote: >> > 2016-09-04 3:03 GMT+02:00 Balint Reczey : >> > > Many packages fail to

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi! On Wed, 2016-10-26 at 05:08:52 +0200, Guillem Jover wrote: > On Wed, 2016-09-07 at 00:48:17 +0200, Bálint Réczey wrote: > > 2016-09-04 3:03 GMT+02:00 Balint Reczey : > > > Many packages fail to build due to gcc ... -shared -no-pie ... failing. > > > I have reported the

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi! On Wed, 2016-09-07 at 00:48:17 +0200, Bálint Réczey wrote: > 2016-09-04 3:03 GMT+02:00 Balint Reczey : > > Many packages fail to build due to gcc ... -shared -no-pie ... failing. > > I have reported the issue to GCC but they don't seem to fix that: > >

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi Guillem, gcc-6/6.2.0-7 has just been uploaded with the changed defaults. The list of architectures is a bit different than the one in the attaches patch. The updated list is: amd64 arm64 armel armhf i386 mips mipsel mips64el ppc64el s390x Cheers, Balint 2016-09-07 0:48 GMT+02:00 Bálint

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi Guillem, I'm rebuilding all packages failed with the original patch and a good share does compile with the following additional patches. I would have preferred only the original patch, but apparently this is our best chance for enabling PIE for the archive. I'll start filing bugs for for the

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Hi Guillem, Many packages fail to build due to gcc ... -shared -no-pie ... failing. I have reported the issue to GCC but they don't seem to fix that: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=77464 The proposed workarounds don't seem to be viable in Debian thus I propose making the -pie dpkg

Bug#835149: dpkg: please adapt setting the default pie hardening flag to gcc's new defaults

Package: dpkg Version: 1.18.10 Severity: wishlist Tags: patch moreinfo Dear Guillem, As a continuation of the discussions [1][2] on debian-devel I'm attaching the simple patch that changes dpkg's pie hardening flag to adapt to GCC's new default settings proposed in #835148. I'm continuing with