Certainly when you change from a hardened profile you're going to lose the "hardened" flag and gain some others that were previously masked.LukynZ wrote:Is entire world reemerge really necessary? Or just packages with pax_kernel use flag and gcc itsefl will be fine?
Unless I've misread the post he wants to go in the opposite direction ie from a hardened to non-hardened profile (desktop) ?mv wrote:After emerging hardened gcc you should recompile everything in order to make use of the hardened CFLAGS which implicitly go with hardened gcc.
Otherwise, your binaries will e.g. not use PIE, even if corresponding support is activated in your kernel.