Hi,

please consider including the attached a patch against the current git 
master branch that allows for build cyrus with -fPIE on system that
support it.
This will result in "Position Independent Executables" which provide
addtional security by allowing the resulting executable to be loaded
to a random address. Making certain security attacks harder to perform.

For some more details on PIE see here:
http://www.linuxfromscratch.org/~manuel/hlfs-book/glibc-2.4/chapter02/pie.html
or here:
http://en.wikipedia.org/wiki/Position-independent_code#Position-independent_executables

We are using this patch (adopted for 2.3.X) sucessfully since quite some
time in our packages. I also updated the enhancement request bugzilla:

http://bugzilla.cyrusimap.org/bugzilla3/show_bug.cgi?id=2691

regards,
        Ralf
-- 
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)

Attachment: 0001-build-with-fPIE-if-supported.dif
Description: application/mbox

Reply via email to