Bug#574716: hardening-wrapper: Please disable -pie/-fPIE for avr32
Package: hardening-wrapper Severity: wishlist Hi, Please could -pie and -fPIE be disabled for avr32, since the toolchain does not yet properly support this, and probably won't for some time. Thanks. Regards, Bradley Smith -- Bradley Smith b...@brad-smith.co.uk Debian GNU/Linux Developer bradsm...@debian.org GPG: 0xC718D347 D201 7274 2FE1 A92A C45C EFAB 8F70 629A C718 D347 signature.asc Description: PGP signature
Bug#574716: [hardening-discuss] Bug#574716: hardening-wrapper: Please disable -pie/-fPIE for avr32
Hi, On Sat, Mar 20, 2010 at 01:20:50PM +, Bradley Smith wrote: Please could -pie and -fPIE be disabled for avr32, since the toolchain does not yet properly support this, and probably won't for some time. Can you give me some examples of packages or workflows that use avr32 where this ends up as a problem? I don't know off the top of my head how to detect this environment to correctly disable PIE there. Thanks, -Kees -- Kees Cook@debian.org -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#574716: [hardening-discuss] Bug#574716: hardening-wrapper: Please disable -pie/-fPIE for avr32
On Sat, 20 Mar 2010 13:35:47 -0700 Kees Cook k...@debian.org wrote: On Sat, Mar 20, 2010 at 01:20:50PM +, Bradley Smith wrote: Please could -pie and -fPIE be disabled for avr32, since the toolchain does not yet properly support this, and probably won't for some time. Can you give me some examples of packages or workflows that use avr32 where this ends up as a problem? I don't know off the top of my head how to detect this environment to correctly disable PIE there. I'm not sure I follow what you mean, avr32 is an architecture, so this simply needs to be disabled in hardening.make, along with hppa, m68k, mips and mipsel. Regards, Bradley Smith -- Bradley Smith b...@brad-smith.co.uk Debian GNU/Linux Developer bradsm...@debian.org GPG: 0xC718D347 D201 7274 2FE1 A92A C45C EFAB 8F70 629A C718 D347 signature.asc Description: PGP signature
Bug#574716: [hardening-discuss] Bug#574716: hardening-wrapper: Please disable -pie/-fPIE for avr32
On Sat, Mar 20, 2010 at 08:50:19PM +, Bradley Smith wrote: I'm not sure I follow what you mean, avr32 is an architecture, so this simply needs to be disabled in hardening.make, along with hppa, m68k, mips and mipsel. Ah-ha, okay. I thought you meant the avr cross-compiler. What actually builds avr32 packages of hardening-wrapper? I don't see avr32 listed among the buildd architectures: https://buildd.debian.org/pkg.cgi?pkg=hardening-wrapper But I can certainly add an exception for avr32. Do the other features work okay there? -Kees -- Kees Cook@debian.org -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#574716: [hardening-discuss] Bug#574716: hardening-wrapper: Please disable -pie/-fPIE for avr32
On Sat, 20 Mar 2010 13:56:16 -0700 Kees Cook k...@debian.org wrote: On Sat, Mar 20, 2010 at 08:50:19PM +, Bradley Smith wrote: I'm not sure I follow what you mean, avr32 is an architecture, so this simply needs to be disabled in hardening.make, along with hppa, m68k, mips and mipsel. Ah-ha, okay. I thought you meant the avr cross-compiler. What actually builds avr32 packages of hardening-wrapper? I don't see avr32 listed among the buildd architectures: https://buildd.debian.org/pkg.cgi?pkg=hardening-wrapper But I can certainly add an exception for avr32. Do the other features work okay there? As far as I'm aware, everything else is fine. avr32 is on debian-ports.org along with some others: http://buildd.debian-ports.org/status/package.php?suite=unstablep=hardening-wrapper (Don't be fooled by the installed status on there, it's just picking up my workarounds :) ) Regards, Bradley Smith -- Bradley Smith b...@brad-smith.co.uk Debian GNU/Linux Developer bradsm...@debian.org GPG: 0xC718D347 D201 7274 2FE1 A92A C45C EFAB 8F70 629A C718 D347 signature.asc Description: PGP signature
