I checked the debian package for hardening-wrapper and it seems deprecated [1], but fwiw still useful imo. your configure directives are more up2date from what

I checked the debian package for hardening-wrapper and it seems deprecated [1], but fwiw still useful imo. your configure directives are more up2date from what I posted by moving -pie -fpic to cflags: CFLAGS='-O2 -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fpic -pie' \ LDFLAGS='-Wl,-z,relro,-z,now -Wl,-z,now' ./configure [1] https://wiki.debian.org/HardeningWalkthrough#My_package_already_uses_hardening-wrapper_or_hardening-includes._Should_I_switch_to_dpkg-buildflags.3F https://wiki.debian.org/HardeningWalkthrough#My_package_alre...