From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: hardening Date: Sun, 11 Mar 2018 15:04:49 +0100 Message-ID: <878tayu2ri.fsf@elephly.net> References: <87a7wwesx2.fsf@abyayala.i-did-not-set--mail-host-address--so-tickle-me> <871si6w76r.fsf@gmail.com> <20180311133732.ojqacszx2mckvdim@abyayala> <20180311134059.mwy6flojzvxxnnah@abyayala> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:52220) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ev3F7-0004qz-Hu for guix-devel@gnu.org; Sun, 11 Mar 2018 11:50:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ev3F4-0001gt-G4 for guix-devel@gnu.org; Sun, 11 Mar 2018 11:50:37 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21110) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ev3F4-0001ge-6f for guix-devel@gnu.org; Sun, 11 Mar 2018 11:50:34 -0400 In-reply-to: <20180311134059.mwy6flojzvxxnnah@abyayala> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: ng0 Cc: guix-devel@gnu.org ng0 writes: >> > The flags I use (suggested by Debian Wiki[0]) are: >> > >> > CPPFLAGS=3D-D_FORTIFY_SOURCE=3D2 >> >> How does this differ from "-O2 -D_FORTIFY_SOURCE" in CFLAGS? >> I know O2 is optimization and that FORTIFY_SOURCE requires optimization >> to be specified. > > Okay, I've read some related commits and bug tickets, I understand > the difference now. Please share. Otherwise this comment isn=E2=80=99t really helpful for this discussion. -- Ricardo