...this is proposed by debian; lets see how this turns out We could also add -fstack-protector-strong, but I prefer to set this in the package definition