Ammar Askar added the comment:
Hi Jeffrey, your second solution where you omit `-pie` is almost there. Instead
of modifying the Makefile you can pass `-pie` in `LINKFORSHARED`:
export CFLAGS="-fPIC -fstack-protector-all -D_FORTIFY_SOURCE=2"
export CXXFLAGS="-fPIC -fstack-protector-all -D_FOR
Jeffrey Walton added the comment:
> $ checksec.sh --file ./python
> RELRO STACK CANARY NXPIE RPATH
> RUNPATH FILE
> Full RELRO Canary found NX enabledPIE enabled No RPATH No
> RUNPATH ./python
Here's what a standard Python
New submission from Jeffrey Walton:
$ hg id
3736bf94535c+ tip
A standard Python build does not take a proactive approach to integrating with
platform security measures. Attepting to add the measures results in a failed
build.
For example:
export CC=/usr/bin/gcc
export CXX=/usr/bin/g++
export