3 ms·
I think the background to this is simplifying the mess of RPM macros which are needed to set all these flags: https://src.fedoraproject.org/rpms/redhat-rpm-con
by rwmj 3y ago
I think the background to this is simplifying the mess of RPM macros which are needed to set all these flags:
https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/rawhide/f/macros#_392 https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/ra...
https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/rawhide/f/macros#_402 https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/ra...
https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/rawhide/f/redhat-hardened-cc1 https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/ra...
(and several other places). I'm sure Debian has something similar as do other distros, so having one flag which does it all is an advantage.
- nerpderp82 3y agoDo you know if any distros are going to enable it by default? I think -Fhardened should be opt-out not in.