Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Theodore Ts'o
On Sat, May 21, 2016 at 09:21:55PM +0200, Christian Seiler wrote: > ><<> > > Hope that helps. Yes, that was incredibly helpful. Thanks!!! - Ted

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Christian Seiler
On 05/21/2016 07:32 PM, Theodore Ts'o wrote: > If the pie hardening option is enabled, then dpkg-buildflags --get > LDFLAGS emits: > > -fPIE -pie -Wl,-z,relro > > According to the dpkg-buildflags man page: > >LDFLAGS > Options passed to the compiler when linking

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Christian Kastner
On 2016-05-21 19:32, Theodore Ts'o wrote: > What is the suggested workaround if you have a package that has both > executables and shared libraries, and you want to enable pie > hardening for the executables? Here's one possible solution:

Re: DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Andrey Rahmatullin
On Sat, May 21, 2016 at 01:32:19PM -0400, Theodore Ts'o wrote: > If the pie hardening option is enabled, then dpkg-buildflags --get > LDFLAGS emits: > > -fPIE -pie -Wl,-z,relro > > According to the dpkg-buildflags man page: > >LDFLAGS > Options passed to the

DEB_BUILD_MAINT_OPTIONS=hardening=+pie breaks shared library builds

2016-05-21 Thread Theodore Ts'o
If the pie hardening option is enabled, then dpkg-buildflags --get LDFLAGS emits: -fPIE -pie -Wl,-z,relro According to the dpkg-buildflags man page: LDFLAGS Options passed to the compiler when linking executables or shared objects Unfortunate