Control: tags -1 pending On 06/24/2017 08:37 PM, Adrian Bunk wrote: > With gcc in stretch defaulting to PIE, hardening=+all,-pie changed > semantics from "enable hardening but not PIE" to "enable all hardening > and explicitely disable the default PIE". > The latter is usually not intended. > > The -pie in hardening flags was in some cases required in pre-stretch > releases to avoid build failures caused by (incorrectly) passing -fPIE > to the compiler when building shared libraries or plugins. > This problem does no longer exist.
PIE has been enabled now that it no longer causes build failures. We still have a number of packages that need the same change, but haven't been touched for stretch yet. Not changing this for postgis was an oversight for the first upload for stretch. A new upload to unstable will follow shortly. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1
