Let's continue this discussion on the packaging mailing list.

Heiko Helmle heiko.helmle@head.de writes:

Andreas Jaeger schrieb:

...

• Enable -fstack-protector for the new distros for every package by default

Gentoo is supporting -fstack-protector for quite some time now and you might want to have a look at their ebuild database for some packages that have little propblems with that compiler flag.

Fedora should have patches as well. If people using the buildservice like to test this, it would be fine.

If you're interested, i'll aggregate some bugzilla entries from bugs.g.o for this...

A quick grep over portage brought these packages all have some special handling for -fstack-protector (or simply disable it):

mozilla-firefox mozilla-thunderbird wesnoth xterm tetex texlive iptables sane-backends (seems only amd64) hesiod amule lsof lm_sensors memtest86 grub (seems to be build issue) syslinux qemu xen-tools opal openh323 xulrunner hylafax lyx openoffice windowmaker perl ocaml erlang dietlibc pwlib libffi monotone valgrind emacs (ICE) fcpci wireshark

Thanks for that list, let's see what we figure out in our build,

Andreas