Hi! On Sun, 2016-08-21 at 10:24:42 +0200, Bálint Réczey wrote: > I'm testing a set of patches [2] for gcc and dpkg which enable bindnow for all > arches and PIE for amd64, ppc64el and s390x in sync with Ubuntu. > > My assumption was that this set of architectures need the least amount of > additional work since they are tested already in Ubuntu, but I would be happy > if more ports would opt in for PIE. > > I plan filing wishlist bugs against dpkg and gcc with the patches > after I rebuilt a > few packages with the defaults.
TBH I think PIE should in fact be safer to enable globally than bindnow, because the latter changes the run-time behavior and things might break (perhaps even silently) when failing to load plugins or similar. From dpkg PoV enabling both, would at least require a full-archive rebuild, for bindnow ideally also a full autopkgtest run (as the updated dpkg FAQ states now, after Lucas Nussbaum approached me some weeks ago mentioning he was willing to do such archive-wide rebuild). Thanks, Guillem