%global _hardened_build 1 not working?

Richard Shaw hobbes1069 at gmail.com
Tue May 21 13:58:12 UTC 2013


I got two bug reports sent to me because -fPIE was not used and the
packages contain suid binaries.

I'm working on fixing it and I added %global _hardened_build 1 to my spec
files but the output of %{optflags} does not seem to be modified as the
packaging guidelines[1] suggest they should.

What am I doing wrong?

Thanks,
Richard

[1] http://fedoraproject.org/wiki/Packaging:Guidelines#PIE
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20130521/6cdf0a4e/attachment.html>


More information about the devel mailing list