Hi, On Wed, Mar 7, 2012 at 2:15 PM, Simon Ruderich <[email protected]> wrote: > Dear Maintainer, > > Please enable the last missing hardening flag -z now. The > following patch adds it (+all to also enable possible future > hardening flags). For more hardening information please have a > look at [1], [2] and [3]. > > Additionally CMake ignores CPPFLAGS, the patch also fixes that by > passing them through CFLAGS/CXXFLAGS.
I initially used +pie instead because the documentation explicitly mentioned that interactive programs shouldn't use +all. I think it had something to do with +bindnow being too slow for interactive programs. I can't find this recommendation anymore, so I'm assuming it's no longer considered a reason to avoid +all. I'll do some tests. Thanks for the patch. I'll upload an updated version soon. Regards, -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
