Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-29 Thread Jörg Sommer
Hi Kees, Kees Cook schrieb am Mon 28. Apr, 12:35 (-0700): On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c but this fails on i386 and amd64.

Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kees Cook
Hi Jörg, On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c but this fails on i386 and amd64. /usr/bin/ld:

Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kees Cook
Hi Jörg, On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: I've enabled hardening support for slrn. Ah! I see the problem now. You're doing a separate debian/rules thing, instead of using hardening-wrapper and DEB_BUILD_HARDENING=1. You have: ifeq (,$(findstring

Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kurt Roeckx
On Mon, Apr 28, 2008 at 12:35:51PM -0700, Kees Cook wrote: Hi Jörg, On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c but this fails on i386 and