On Thu, Feb 19, 2015 at 10:37:46AM +0000, Richard W.M. Jones wrote: > On Thu, Feb 19, 2015 at 11:35:17AM +0100, Jakub Jelinek wrote: > > On Thu, Feb 19, 2015 at 10:30:50AM +0000, Richard W.M. Jones wrote: > > > info gcc, of course yes. -DPIC is not documented at all, and the > > > various pie/pic options are obscure to say the least. > > > > Why should -DPIC be documented? -D is documented. -DPIC means define > > macro PIC to 1. There is no magic in that beyond, just a convention, > > used e.g. by libtool, so that some sources can do things conditional on > > whether they are compiled as position independent or not. Of course, gcc > > also predefines __pic__/__PIC__/__pie__/__PIE__ macros depending on command > > line options. > > Can I ask you a simple question? Which of: > > -DPIE > -fPIE > -fpie Missed one: -pie Reading the thread that Padraig pointed to, it seems as if _hardened_build should be adding the right flags already. It looks as if the packager should not need to add flags at all (they would be added automatically by %{configure}). So a second question would be, why doesn't it? Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com virt-builder quickly builds VMs from scratch http://libguestfs.org/virt-builder.1.html -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct