[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Enabling PIE by default for Stretch



* Niels Thykier:

> As brought up on the meeting last night, I think we should try to go for
> PIE by default in Stretch on all release architectures!
>  * It is a substantial hardening feature
>  * Upstream has vastly reduced the performance penalty for x86
>  * The majority of all porters believe their release architecture is
>    ready for it.
>  * We have sufficient time to solve any issues or revert if it turns out
>    to be too problematic.

Do you think that PIE-by-default makes BIND_NOW-by-default
unnecessary?

(The argument is that with PIE, it is much more difficult to get a
controlled GOT write.)


Reply to: