Re: [gentoo-hardened] sweet flag-o-matic lubbin'

[Scott W Taylor]

I'd hate to see ebuilds end up with something screwy-lookin like
"has_pie && filter-flags -fPIC"... There are a handful of ebuilds now
with the outdated "has_version hardened-gcc" that need *something* done
to them. filter-flags is a great thing for the ebuilds that'll work with
just that being added. But of course, its not a perfect world, and there
are makefiles and such that come from upstream that ignore CFLAGS and
need either CC set, or some sed love. Either way, we need some way to
handle the MANY ways that could cause a compiler to build pic/pie/ssp.
We aimed for something that was efficient, readable, and extensible.
There is either a branded gcc or some *FLAGS variable being set, and as
that is still somewhat up in the air, I would much rather see it get
written into one spot. Since flag-o-matic needs this information too and
its already inherited by the ebuilds that have BREG/SSP issues, it makes
the perfect home for this added function. Anyway, I like where we've
headed with this, and this would allow us to fix all the BREG-unhappy
ebuilds in a way thats not going to require 160 ebuilds to get changed
every 6 months.

    
-- 
Scott W Taylor <swtaylor@g.o>


--
gentoo-hardened@g.o mailing list