Re: Bug#1113774: Disabling -fcf-protection in sudo for bookworm

Christoph Berg <[email protected]> Sun, 23 Nov 2025 23:03:49 +0100
Newsgroups gmane.linux.debian.devel.ctte
Message-ID <[email protected]>
Re: Helmut Grohne
> A minor aspect missing in the
> summary is that -fcf-protection is actually controlling two distinct
> features with one flag, one of which poses the problem we've been
> discussing. The other feature likewise does not apply to i386.
> Therefore, this addition does not affect the conclusion.

Thanks, I should have mentioned that in the summary. I left it out
from the ballot because only half-disabling the feature would likely
not make the clean, "obviously correct" patch that Marc wanted.

Christoph