Is something like this what we should be doing? http://mainisusuallyafunction.blogspot.com/2012/05/automatic-binary-hardening-with.html Or just -fPIE? Or ... I suspect we also wan to do something like --disable-static to halve the libtool build times. Is -fPIC still needed if -fPIE is specified? Thanks! sage -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html