Hi, http://fedoraproject.org/wiki/Packaging:Guidelines#Compiler_flags says that "Compilers used to build packages must honor the applicable compiler flags set in the system rpm configuration. Honoring means that the contents of that variable is used as the basis of the flags actually used by the compiler during the package build." In Fedora, we recently enabled "-fstack-protector-strong" in system rpm configuration - but are all packages using this enhanced hardening feature? To answer this question (and more), I wrote a program for scanning RPM packages, in order to see which compiler flags were being used to build them. The "flags-scanner" projects lives on GitHub, https://github.com/kholia/flags-scanner Initial scan results are available on the following URL, https://halfie.fedorapeople.org/flags-scanner/ Now, I need your feedback and cool ideas to improve this project :-) Thanks, Dhiru -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct