I noticed the Installing section suggests using -g flag for compiling Erlang. I would imagine omitting debug symbols should generally increase security or be neutral, but definitely not increase it. What is the reasoning behind this recommendation?
michalmuskala
1
voltone
Ah, that was not intentional, thanks for pointing it out. We just wanted to illustrate how the hardening flags need to be added to other flags the user might want to set. There is some more copy & paste weirdness going there.
How’s this: Do not recommend `-g` in CFLAGS by voltone · Pull Request #15 · erlef/security-wg · GitHub ?
1