PIE/PIC support on base

Jeremie Le Hen jlh at FreeBSD.org
Thu Oct 16 21:59:53 UTC 2014


On Thu, Oct 16, 2014 at 8:21 PM, David Carlier
<david.carlier at hardenedbsd.org> wrote:
>
> I chose the "atomic" approach, at the moment very few binaries are
> concerned at the moment. So I applied INCLUDE_PIC_ARCHIVE in the needed
> libraries plus created WITH_PIE which add fPIE/fpie -pie flags only if you
> include <bsd.prog.pie.mk> (which include <bsd.prog.mk>...) otherwise other
> binaries include <bsd.prog.mk> as usual hence does not apply. Look
> reasonable approach ?

I think I understand what you mean.  But I think PIE is commonplace
nowadays and I don't understand what you win by not enabling it for
the whole system.  Is it a performance concern?  Is it to preserve
conservative minds from to much change? :)

-- 
Jeremie Le Hen
jlh at FreeBSD.org


More information about the freebsd-arch mailing list