On 2016-05-21 19:32, Theodore Ts'o wrote:
> What is the suggested workaround if you have a package that has both
> executables and shared libraries, and you want to enable pie
> hardening for the executables?
Here's one possible solution:
https://sources.debian.net/src/keyutils/1.5.9-9/debian/patches/hardening.patch/
I've applied this pattern to a number of packages and it works quite well.
Regards,
Christian
Attachment:
signature.asc
Description: OpenPGP digital signature