Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 30 Apr 2013 21:51:19 +0200 (CEST)
From: Gilles Espinasse <>
Subject: Re: PIE on x86_64

----- Mail original -----
> De: "Vasily Kulikov" <>
> À:
> Envoyé: Mardi 30 Avril 2013 19:36:58
> Objet: Re: [owl-dev] PIE on x86_64
> > 
> > Unfortunately changing the compiler defaults can break things in
> > subtle ways. The most common breakage I'm aware of from making pie the
> > default occurs in packages with assembler source files that are
> > written in non-pic-compatible ways. These will turn into TEXTRELs in
> > the pie binary, which depending on the arch, may just result in heavy
> > runtime bloat (e.g. on 32-bit x86) or produce an error at link time
> > (e.g. on x86_64). I seem to recall a user running into this issue
> > in OpenSSL...
> I've tried to enable PIE by default and disable it on -static, etc.
> The patch is based on this one:
I borrowed the patch from HLFS too, but that was against gcc-4.5.1 (and use that with gcc-4.4).
You could find that at
Patches come from

Gentoo has a hardened gcc patchset for any versions:

> Some binary files in $PATH still miss DYN Type, will fix this too.

On the files that my distrib ship, only ldconfig is not DYN.


Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ