Hi there, Apparently I'm not getting library address randomization for any programs (compiled or not as PIE). Whereas the binary itself, stack and heap are randomly getting their addresses changed from one execution to the next, the library stands still at a predictable location. Strangely enough I've got the expected results out of Ubuntu 8.10. Here's one example: [ricardo@localhost ~]$ cat /proc/sys/kernel/randomize_va_space 2 [ricardo@localhost ~]$ cat /proc/sys/kernel/exec-shield 1 [ricardo@localhost ~]$ echo 'int main(){}' > dummy.c [ricardo@localhost ~]$ gcc -fpie -pie -o dummy dummy.c [ricardo@localhost ~]$ ldd dummy linux-gate.so.1 => (0x00130000) libc.so.6 => /lib/libc.so.6 (0x00133000) /lib/ld-linux.so.2 (0x00110000) [ricardo@localhost ~]$ ldd dummy linux-gate.so.1 => (0x00130000) libc.so.6 => /lib/libc.so.6 (0x00133000) /lib/ld-linux.so.2 (0x00110000) Am I missing something? This is the third mailing list that I'm trying. Thanks a lot :) -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list