From: Wesley W. T. <we...@te...> - 2016-11-11 18:57:23
|
Some added security. If you don't know where objects are located, it's harder to write exploit code. On Fri, Nov 11, 2016 at 7:18 AM, Henry Cejtin <hen...@gm...> wrote: > I'm curious, what is the reason for position indep. code by default in > Debian now? > > On Thu, Nov 10, 2016 at 3:00 PM, Florian Weimer <fw...@de...> wrote: >> * Matthew Fluet: >> >>> And, this is where I haven't figured out what Debian is trying to >>> achieve. Is the PIC/PIE default gcc just during package building (so >>> that executables within .deb packages are PIE), or is it also the >>> behavior of an installed Debian system, so that a normal user invoking >>> gcc will get the PIC/PIE default? >> >> It's the latter. GCC says: >> >> Configured with: […] --enable-default-pie […] >> >> I have verified that just running gcc with no flags produces a PIE. >> >>> If the behavior of an installed Debian system is not to have a >>> PIC/PIE default gcc, then you will end up with the awkward situation >>> where MLton will (unnecessarily) generate PIC code, although I don't >>> think it a problem if PIC object is linked with non-PIC objects into >>> a non-PIE executable. >> >> No, it's going to work just fine. It's slightly slower than >> necessary, but especially on amd64, the difference is minimal. >> >> So I think it would be fine to generate PIC code unconditionally on >> Debian. >> >> -- >> You received this message because you are subscribed to the Google Groups "MLton-user" group. >> To unsubscribe from this group and stop receiving emails from it, send an email to mlt...@ml.... >> >> >> ------------------------------------------------------------------------------ >> Developer Access Program for Intel Xeon Phi Processors >> Access to Intel Xeon Phi processor-based developer platforms. >> With one year of Intel Parallel Studio XE. >> Training and support from Colfax. >> Order your platform today. http://sdm.link/xeonphi >> _______________________________________________ >> MLton-user mailing list >> MLt...@li...; mlt...@ml... >> https://lists.sourceforge.net/lists/listinfo/mlton-user > > -- > You received this message because you are subscribed to the Google Groups "MLton-user" group. > To unsubscribe from this group and stop receiving emails from it, send an email to mlt...@ml.... > > > ------------------------------------------------------------------------------ > Developer Access Program for Intel Xeon Phi Processors > Access to Intel Xeon Phi processor-based developer platforms. > With one year of Intel Parallel Studio XE. > Training and support from Colfax. > Order your platform today. http://sdm.link/xeonphi > _______________________________________________ > MLton-user mailing list > MLt...@li...; mlt...@ml... > https://lists.sourceforge.net/lists/listinfo/mlton-user -- You received this message because you are subscribed to the Google Groups "MLton-user" group. To unsubscribe from this group and stop receiving emails from it, send an email to mlt...@ml.... |