On Wed, 07 Jun 2017 22:44:31 +0200 "Andreas K. Huettel" <[email protected]> wrote:
> 2) Switch GCC from default-non-PIE to default-PIE executables.
Yay \o/. It's a major change though. Will qa@ write us some docs
on the topic? Landing page:
https://wiki.gentoo.org/wiki/Project:Quality_Assurance#Documentation
Currently we have scarce mention of PIC-related problems:
https://wiki.gentoo.org/wiki/Hardened/Position_Independent_Code_internals
https://wiki.gentoo.org/wiki/Project:AMD64/Fixing_-fPIC_Errors_Guide
We will have a bit more more of those problems. Recent example:
https://bugs.gentoo.org/show_bug.cgi?id=618366
I'm personally interested in how to filter out '-pie' in dosemu.
What is the canonical way to detect '-pie' / '-no-pie' support
in toolchain and flip it?
A quick poll:
How about other toolchains?
A few examples that will have (perhaps minor) troubles doing that:
- sys-devel/clang will need to be defaulting to pie. llvm@
llvm is especially touchy as otherwise it's easy to have static library mix.
- dev-lang/ghc will need to be defaulted to pie. haskell@
- dev-lang/go will need to be defaulted to pie. williamh@
- dev-lang/ocaml will need to be defaulted to pie. ml@
- dev-lang/crystal will need to be defaulted to pie. [email protected]
- others?
[haskell@ hat on]
We are OK to invest some time and default to pie for dev-lang/ghc
produced binaries. Perhaps slightly after new profiles are introduced
into the tree as it will require merging a few patches upstream.
--
Sergei
pgpST54Qx0Lm7.pgp
Description: Цифровая подпись OpenPGP
