HEADS-UP: PIE enabled by default on stable/13
- Reply: Marcin Wojtas : "Re: HEADS-UP: PIE enabled by default on stable/13"
- Reply: Marcin Wojtas : "Re: HEADS-UP: PIE enabled by default on stable/13" {{#reference}}
- In reply to: {{ref.name}}: "{{ref.subject}}"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 23 Jan 2022 10:36:29 UTC
Hi, As of 396e9f259d962 the base system binaries are now built as position-independent executable (PIE) by default, for 64-bit architectures. Thanks to that enabling ASLR can be done simply by sysctls knobs when booting the kernel. If you track stable/13 and normally build WITHOUT_CLEAN you'll need to do one initial clean build -- either run `make cleanworld` or set WITH_CLEAN=yes. The change is a pure MFC of the changes integrated to -CURRENT early 2021 and no issues are expected, but in case any problems are observed, please issue a PR and/or let me know in this thread. Best regards, Marcin