Re: Enabling PIE by default for Stretch

[Bálint Réczey <balint@balintreczey.hu>]

Hi Adrian,

2016-10-20 21:02 GMT+02:00 Adrian Bunk <bunk@stusta.de>:
> Hi,
>
> since PIE is now default in unstable, I assume all/most of these bugs
> should be changed to RC?

Yes, they should.
I was hoping to get some feedback on the dpkg bugs [1,2] because those
changes would also
be integral part of the transition and planned bumping the severities
after a new dpkg has been
uploaded.
GCC also enabled bindnow for a subset of all architectures, which I
would prefer being reverted to
keep using the dpkg hardening features instead.

Cheers,
Balint

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835146
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835149


>
> https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=pie-bindnow-20160906&users=balint@balintreczey.hu;dist=unstable
>
> cu
> Adrian
>
> --
>
>        "Is there not promise of rain?" Ling Tan asked suddenly out
>         of the darkness. There had been need of rain for many days.
>        "Only a promise," Lao Er said.
>                                        Pearl S. Buck - Dragon Seed
>