On 17/04/12 00:37, Kevin Chadwick wrote: > On Mon, 16 Apr 2012 11:58:36 +0200 > Lukáš Jirkovský wrote: > >> (especially on 32bit). > > > Slightly on 32bit and almost no difference on 64bit. OpenBSD uses PIEs > everywhere and my x86 users say everythings much quicker than Windows. > Care to define "slightly"... I looked into this when we added some hardening to our default CFLAGS and the benchmarks I found indicated that adding PIE to 32bit added a 5-10% performance hit. My suggestion would be for maintainers of various applications that warrant this security (openssh, apache, samba, firefox...) to manually enable it. We could make PIE the default for x86_64. Allan
