On 3/2/21 7:57 am, Christopher W. via pacman-dev wrote:
A few months back there was a proposal to edit the default makepkg build flags for improved security:
https://lists.archlinux.org/pipermail/arch-dev-public/2020-July/030031.html
As far as I can tell, this was never committed. The show-stopper at the time was Clang 11 not being released yet. Now that it's been in the repos for a while, could we revisit this improvement and possibly get a mass rebuild with it applied? .
This is on the cards again with slight alterations. I have written a proposal that will go through the new RFC process (not live yet), which will stop things like this getting lost in the future. https://gitlab.archlinux.org/allan/rfcs/-/blob/buildflags/rfcs/00xx-buildfla...