Il 20/02/22 18:51, Vitaly Zaitsev via devel ha scritto: > On 20/02/2022 11:31, Mattia Verga via devel wrote: >> So, where -fPIE/-fPIC are supposed to be injected in build flags? > $ rpm -E %optflags > -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches > -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 > -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 > -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 > -m64 -mtune=generic -fasynchronous-unwind-tables > -fstack-clash-protection -fcf-protection > > $ cat /usr/lib/rpm/redhat/redhat-hardened-cc1 > *cc1_options: > + %{!r:%{!fpie:%{!fPIE:%{!fpic:%{!fPIC:%{!fno-pic:-fPIE}}}}}} > > -- > Sincerely, > Vitaly Zaitsev (vitaly@xxxxxxxxxxxxxx) Ah, my fault... I was expecting to see explicitly -fPIC/-fPIE in the export statement at the start of the %build section, I didn't considered the inheritance from external files. Mattia _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure