Requirement of -mcet to enable CET has been removed from GCC 8 by revision 259496: commit b1384095a7c1d06a44b70853372ebe037b2f7867 Author: hjl <hjl@138bc75d-0d04-0410-961f-82ee72b054a4> Date: Thu Apr 19 15:15:04 2018 +0000 x86: Enable -fcf-protection with multi-byte NOPs -fcf-protection no longer depens on -mcet. -mcet should be removed from __global_compiler_flags.
Not rthat the above commit is not currently in Fedora (gcc-8.0.1-0.20.fc28.x86_64, gcc-8.0.1-0.21.fc29.x86_64). Coordination with the GCC maintainers is needed.
We need to fix this in Fedora 28 as well, but this needs a GCC update first. gcc-8.0.1-0.20.fc28 still requires -mcet for -fcf-protection.
redhat-rpm-config-108-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-fddc25161e
redhat-rpm-config-108-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-fddc25161e
redhat-rpm-config-108-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.