On Sat, May 12, 2012 at 11:30:32AM +0000, Laszlo Boszormenyi wrote: > Hi Mike, > > On Sat, 2012-05-12 at 10:00 +0200, Mike Hommey wrote: > > Since you're using /usr/share/dpkg/buildflags.mk and export its CFLAGS, > > you don't need that. You may need to add DPKG_EXPORT_BUILDFLAGS=1, > > though, for the LDFLAGS, but you don't need DEB_BUILD_HARDENING. > What's wrong with hardening-wrapper? If I drop it, even with > DEB_BUILD_HARDENING set to 1, I get a normal executable and not a > position independent executable.
That's probably because you don't export LDFLAGS. But /usr/share/dpkg/buildflags.mk is supposed to be enough on its own. hardening-wrapper + DEB_BUILD_HARDENING is the old way to do things. Although, if you do want PIE, which is not mandatory afaik, you need to add export DEB_BUILD_MAINT_OPTIONS = hardening=+all. Mike -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
