Bug#1113774: Debian Technical Committee: Bug#1113774: Disabling -fcf-protection in sudo for bookworm

Timo Röhling <[email protected]> Mon, 5 Jan 2026 23:46:28 +0100
Newsgroups gmane.linux.debian.devel.ctte
Organization The Debian Project
Message-ID <309c0940-90ec-4f1a-9239-b0334ed2909d__21760.7563406759$1767653367$gmane$org@mail.gaussglocke.de>
--m6tbj5cpwwihfwnk
Content-Type: text/plain; protected-headers=v1; charset=utf-8;
	format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: Bug#1113774: Debian Technical Committee: Bug#1113774: Disabling
 -fcf-protection in sudo for bookworm
MIME-Version: 1.0

Hi Marc,

* Marc Haber <[email protected]> [2026-01-04 06:59]:
>Of course, people now demand that fix in Trixie as well (see #1004894).=20
>I expected this to happen. People are never satisfied with what they=20
>get. What does the ctte think about that?
As far as I am concerned, you have final authority here. If you feel=20
particularly generous, you can apply the fix, but I don't see the need=20
if the only affected hardware does not satisfy the trixie baseline=20
requirements anyway.


Cheers
Timo

--=20
=E2=A2=80=E2=A3=B4=E2=A0=BE=E2=A0=BB=E2=A2=B6=E2=A3=A6=E2=A0=80   =E2=95=AD=
=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=
=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=
=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=
=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=
=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=
=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=
=E2=94=80=E2=94=80=E2=95=AE
=E2=A3=BE=E2=A0=81=E2=A2=A0=E2=A0=92=E2=A0=80=E2=A3=BF=E2=A1=81   =E2=94=82=
 Timo R=C3=B6hling                                       =E2=94=82
=E2=A2=BF=E2=A1=84=E2=A0=98=E2=A0=B7=E2=A0=9A=E2=A0=8B=E2=A0=80   =E2=94=82=
 9B03 EBB9 8300 DF97 C2B1  23BF CC8C 6BDD 1403 F4CA =E2=94=82
=E2=A0=88=E2=A0=B3=E2=A3=84=E2=A0=80=E2=A0=80=E2=A0=80=E2=A0=80   =E2=95=B0=
=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=
=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=
=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=
=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=
=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=
=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=E2=94=80=
=E2=94=80=E2=94=80=E2=95=AF

--m6tbj5cpwwihfwnk
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=UqMZ
-----END PGP SIGNATURE-----

--m6tbj5cpwwihfwnk--