Re: Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Jörg Sommer
Hi Kees, Kees Cook schrieb am Mon 28. Apr, 12:35 (-0700): > On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: > > gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ > > -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c > > > > but this fails on i386 and amd64.

Re: Bug#478057: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kurt Roeckx
On Mon, Apr 28, 2008 at 12:35:51PM -0700, Kees Cook wrote: > Hi Jörg, > > On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: > > gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ > > -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c > > > > but this fails on i

Re: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kees Cook
Hi Jörg, On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: > gcc -g -O2 -Wall -g -O2 -fPIC -fPIE -fstack-protector -Wformat=2 -Wextra \ > -D_FORTIFY_SOURCE=2 -Wl,-zrelro,-pie conftest.c > > but this fails on i386 and amd64. > > /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/4.2.3/../.

Re: [hardening-discuss] Linker fails on i386 and amd64 with hardening options

2008-04-28 Thread Kees Cook
Hi Jörg, On Mon, Apr 28, 2008 at 06:43:36PM +0200, Jörg Sommer wrote: > I've enabled hardening support for slrn. Ah! I see the problem now. You're doing a separate debian/rules thing, instead of using hardening-wrapper and DEB_BUILD_HARDENING=1. You have: ifeq (,$(findstring nohardening,$(DEB