With more and more distros and even android employing gccs -fpie for
building packages, should Arch consider enabling it.

For my users it would mean less programs being killed by the
grsecurity kernel due to text relocation attempts. No complaints yet as
I have a sandboxed flash browser but eventually there may be one about
x264/mp4.

For everyone else it would mean a more secure system due to better use
of ASLR.

Are complications like static binaries an issue arch simply hasn't the
time to deal with (does gcc work around them automatically now?) and do
users care more about adding upto a few seconds to the start up time of
some programs on x86 over security?

Reply via email to