https://bugzilla.redhat.com/show_bug.cgi?id=2034758
--- Comment #25 from Mattia Verga mattia.verga@protonmail.com --- (In reply to Maxwell G from comment #24)
(In reply to Dave Dykstra from comment #23)
But the documentation https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/rawhide/f/ buildflags.md says that %set_build_flags is automatically called before the %build step, so how would that help?
That is only valid for F36+ and above, so you should still add it.
I don't think that would make any difference, since %set_build_flags just exports CFLAGS and other compiler flags without -fPIE... I'm not sure where the hardened builds flags are really injected.