Re: In Stretch, gcc producing position independent binaries by default?

From	Reco <recoverym4n@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: In Stretch, gcc producing position independent binaries by default?
Date	2017-04-15 19:30 +0200
Message-ID	<twzGi-YI-13@gated-at.bofh.it> (permalink)
References	<twwp3-7d2-9@gated-at.bofh.it> <twwp3-7d2-7@gated-at.bofh.it> <twwS5-7Dd-1@gated-at.bofh.it> <twxbr-7Ku-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

	Hi.

On Sat, 15 Apr 2017 14:39:49 +0000 (UTC)
Neoklis Kyriazis <nkcyham@yahoo.com> wrote:

> 
> >They patched gcc to produce PIE by default - and that's one of Debian
> >stretch release goals. See:
> >
> >https://wiki.debian.org/Hardening/PIEByDefaultTransition
> 
> 
> Ah thanks! New to Debian so I was not aware of this. My problem though
> is that filers like ROX and pcmanfm do not start PIE executables by
> clicking on them because they are seen as shared objects. 

Yes, that's known problem. I recall seeing some heated discussions
about it, but cannot find the links (was it PIE for Mozilla's built
Firefox? - my memory fails me).
The current consensus for graphical file managers on this seems to be
'yes, PIE executables are broken in this regard, but developer should
provide a .desktop file anyway'.

Not that I agree with such approach (on graphical file managers, PIE
is ok idea), but they took it.

> Anyhow, I expect there are now recommended CFLAGS for gcc when compiling
> binaries for Debian, right?

For 3 last major releases at least. Run 'dpkg-buildflags --get CFLAGS'
to see them. And don't forget 'dpkg-buildflags --get LDFLAGS' for the
linker.

Please note then one's using so called 'sane' build system (autotools,
cmake, etc) - the debhelper usually takes care of recommended CFLAGS
and LDFLAGS by itself.

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

In Stretch, gcc producing position independent binaries by default? Neoklis Kyriazis <nkcyham@yahoo.com> - 2017-04-15 16:00 +0200
  Re: In Stretch, gcc producing position independent binaries by  default? Reco <recoverym4n@gmail.com> - 2017-04-15 16:30 +0200
    Re: In Stretch, gcc producing position independent binaries by  default? Neoklis Kyriazis <nkcyham@yahoo.com> - 2017-04-15 16:50 +0200
      Re: In Stretch, gcc producing position independent binaries by  default? Reco <recoverym4n@gmail.com> - 2017-04-15 19:30 +0200

csiph-web