Argh, I know why: In my sid chroot I have the hardening-wrapper package installed, which silently adds the -pie flag for us. Since we now build-depend on "dpkg-dev (>= 1.16.1~) | hardening-wrapper,", hardening-wrapper does not get installed any more for precise and quantal.
It seems I even attempted that in the past:
postgresql-9.1 (9.1.3-2) unstable; urgency=low
* debian/control, debian/rules: Support and prefer dpkg-buildflags when
building with dpkg-dev >= 1.16.1~. Fall back to hardening-wrapper
otherwise, to keep supporting backports.
* debian/rules: Build with "-z now" for some extra hardening. We can't use
the full "hardening=+all", as PIE causes build failures.
I'll take another look at the build failures again.
Argh, I know why: In my sid chroot I have the hardening-wrapper package installed, which silently adds the -pie flag for us. Since we now build-depend on "dpkg-dev (>= 1.16.1~) | hardening- wrapper, ", hardening-wrapper does not get installed any more for precise and quantal.
It seems I even attempted that in the past:
postgresql-9.1 (9.1.3-2) unstable; urgency=low
* debian/control, debian/rules: Support and prefer dpkg-buildflags when
building with dpkg-dev >= 1.16.1~. Fall back to hardening-wrapper
otherwise, to keep supporting backports.
* debian/rules: Build with "-z now" for some extra hardening. We can't use
the full "hardening=+all", as PIE causes build failures.
I'll take another look at the build failures again.