On Mon, Jan 29, 2018 at 03:55:53PM +0100, Florian Weimer wrote:
> On 01/29/2018 03:43 PM, Kevin Kofler wrote:
> >Is https://fedoraproject.org/wiki/Changes/Annobin (no user-visible
> >improvements, only yet another global distrowide size increase) really worth
> >the circular dependency nightmare (rebuilding annobin requires GCC, but GCC
> >is configured to not work without annobin) or is it time to drop the feature
> >and enact the contingency plan?
> 
> Yes, it is required for meeting our security hardening objectives.
> 
> Ideally, annobin would be built from the GCC source package, but
> since GCC needs more than twelve hours to build on armhfp, that is
> not really an option while we are still adjusting the information
> that annobin collects.

annobin.spec now uses:

  %undefine _annotated_build

so at least the circular dependency is no longer there.  You still
have to remember to rebuild it when a new version of GCC comes out
however.

RIch.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Reply via email to