Re: [gentoo-hardened] use of 'LDFLAGS=-pie' deprecated?

[Ned Ludd]

On Thu, 2004-05-06 at 14:35, Ned Ludd wrote:
> On Thu, 2004-05-06 at 08:31, Ed Wildgoose wrote:
> > Aaron Walker wrote:
> >
> > >I noticed that after upgrading to gcc-3.3.3-r3, while emerging things, I
> > >get lots of "-pie: unrecognized option" messages.
> > >
> > >Has the use of -pie in LDFLAGS been deprecated?  If so, in favor of
> > >what?
>
> Yes..
> It's been deprecated in favor of gcc patches and proper documentation.
> 3/4 of which is still pending.

Based on some recent questions I've gotten on irc.gentoo.org it
sounds like I need to clear up some confusion for some people.
CFLAGS/LDFLAGS still work. They will just be far less supported over
using gcc spec modifications. Reason for this is many Makefile's toss 
out or can't cope with user supplied LDFLAGS such as apache2 or quite 
simply need more logic of when to enable/disable PIE & SSP etc.. But 
rest assured that the flags do work from gcc/binutils.

>
> Anybody love to document things? :)
>
> > >
> > >
> >
> > I believe that with gcc3.3.3-r2 onwards you just need the USE="hardened"
> > flag to get the old behaviour...  I asked a similar question a few days
> > back if you want to check the archives.
> >
> > Perhaps someone who knows what they are talking about could positively
> > confirm this though!
>
> I'll confirm for you that -r4 will be the desired gcc to use as soon as
> I make some changes. -r3 has some undesirable bugs which are fixed in
> the -* masked -r4.
> However the -r4 has it's own unique set of problems with
> some patch offsets that are not playing along unless USE=uclibc is set.
>
> In short.. Give it a week. I've got other things on my plate like trying
> to raise funds to feed myself which must take priority and thus I can't
> dive into gcc right away.
>
> > Ed W
> >
> > --
> > gentoo-hardened@g.o mailing list

-- 
Ned Ludd <solar@g.o>
Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer