Date: Mon, 13 Oct 2014 23:02:27 +0100 From: David Carlier <david.carlier@hardenedbsd.org> To: freebsd-arch@freebsd.org Subject: PIE/PIC support on base Message-ID: <CAMe1fxaYn%2BJaKzGXx%2Bywv8F0mKDo72g=W23KUWOKZzpm8wX4Tg@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hi all, HardenedBSD plans to add PIE support on base in various place. These are B. Drewery suggestions : The _pic ones are not needed. The main lib file just needs INSTALL_PIC_ARCHIVE=yes. Modifying CFLAGS in every Makefile is not right, just add a USE_PIE or something to pull in common logic from share/mk. Also I know that, at least for a start, it wished to be applied in some few places, like tcpdump/traceroute, sendmail ... shells ... I thought about also casper/capsicum ... ntp ... jail Kind regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAMe1fxaYn%2BJaKzGXx%2Bywv8F0mKDo72g=W23KUWOKZzpm8wX4Tg>