Bug#1113774: Disabling -fcf-protection in sudo for bookworm

Matthew Vernon <[email protected]> Tue, 2 Sep 2025 14:58:40 +0100
Newsgroups gmane.linux.debian.devel.ctte
Message-ID <c74dd526-0478-43aa-9be7-d0baaf9b2430__768.205458165028$1756821695$gmane$org@debian.org>
Hi,

I found an old d-devel thread about this from a few years ago[0], which 
led me to the bookworm release notes[1] which say:

"Debian's support for 32-bit PC (known as the Debian architecture i386) 
now no longer covers any i586 processor. The new minimum requirement is 
i686. What this means that the i386 architecture now requires the "long 
NOP" (NOPL) instruction, while bullseye still supported some i586 
processors without that instruction (e.g. the "AMD Geode"). "

As I read it, the conclusion of that d-d thread was that these 
processors are not supported in Bookworm, as it only supports i686, 
which the CPU that the submitter of this TC bug is using is not 
completely i686 compatible.

Regards,

Matthew

[0] https://lists.debian.org/debian-devel/2023/10/msg00118.html
[1] 
https://www.debian.org/releases/bookworm/i386/release-notes/ch-information.en.html#i386-is-i686