Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1271337

Bug#1113774: Disabling -fcf-protection in sudo for bookworm

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi Christoph,

On Wed, Nov 19, 2025 at 08:31:28PM +0100, Christoph Berg wrote:
> The TC has been discussing the issue with all involved parties and Marc, the
> sudo maintainer has agreed to accept advice, so we will just do that instead of
> overruling him.

Thank you for the summary. With the exception of the interaction with
Ben (which I appear to have missed), it accurately matches my
understanding of the matter at hand. A minor aspect missing in the
summary is that -fcf-protection is actually controlling two distinct
features with one flag, one of which poses the problem we've been
discussing. The other feature likewise does not apply to i386.
Therefore, this addition does not affect the conclusion.

> I am calling for votes on this ballot:
> 
>   [A] The TC advises the sudo maintainer to update the sudo package in bookworm
>   such that on the i386 architecture, the `-fcf-protection` compiler flag is no
>   longer used.
> 
>   [F] Further discussion.

I vote A > F.

Helmut

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1113774: Disabling -fcf-protection in sudo for bookworm Christoph Berg <myon@debian.org> - 2025-11-19 20:40 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Paul Tagliamonte <paultag@debian.org> - 2025-11-19 21:20 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Christoph Berg <myon@debian.org> - 2025-11-19 21:40 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Timo Röhling <roehling@debian.org> - 2025-11-20 11:00 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Matthew Vernon <matthew@debian.org> - 2025-11-20 12:10 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Stefano Rivera <stefanor@debian.org> - 2025-11-20 15:00 +0100
  Bug#1113774: Disabling -fcf-protection in sudo for bookworm Helmut Grohne <helmut@subdivi.de> - 2025-11-23 22:50 +0100
    Bug#1113774: Disabling -fcf-protection in sudo for bookworm Christoph Berg <myon@debian.org> - 2025-11-23 23:10 +0100
  Bug#1113774: Debian Technical Committee: Bug#1113774: Disabling -fcf-protection in sudo for bookworm Marc Haber <mh+debian-packages@zugschlus.de> - 2026-01-04 07:10 +0100
    Bug#1113774: Debian Technical Committee: Bug#1113774: Disabling -fcf-protection in sudo for bookworm Helmut Grohne <helmut@subdivi.de> - 2026-01-05 22:40 +0100
    Bug#1113774: Debian Technical Committee: Bug#1113774: Disabling -fcf-protection in sudo for bookworm Timo Röhling <roehling@debian.org> - 2026-01-05 23:50 +0100

csiph-web