[Fedora-packaging] RFC mass bug reporting: checksec failures

Ben Boeckel mathstuf at gmail.com
Thu Sep 17 13:54:19 UTC 2015


On Thu, Sep 17, 2015 at 16:45:46 +0300, Alexander Todorov wrote:
> I meant turning it on globally as in "everything built with CMake in Fedora", 
> like updating the default flags in a RPM macro or updating the default CMake 
> config in Fedora. Which will change all the packages using CMake once they are 
> rebuilt.

Sorry, my first email may have been too subtle. From my first email:

> so adding:
>
>      -DCMAKE_POSITION_INDEPENDENT_CODE:BOOL=ON
>
> to %cmake when hardening is enabled should fix -fPIE missing.

The %cmake macro is defined in macros.cmake which is the CMake version
of %configure. It is part of the cmake package, so a bug there would be
best.

--Ben


More information about the devel mailing list