Re: Enabling PIE by default for Stretch
* Niels Thykier:
> As brought up on the meeting last night, I think we should try to go for
> PIE by default in Stretch on all release architectures!
> * It is a substantial hardening feature
> * Upstream has vastly reduced the performance penalty for x86
> * The majority of all porters believe their release architecture is
> ready for it.
> * We have sufficient time to solve any issues or revert if it turns out
> to be too problematic.
Do you think that PIE-by-default makes BIND_NOW-by-default
unnecessary?
(The argument is that with PIE, it is much more difficult to get a
controlled GOT write.)
Reply to: