On Fri, Apr 13, 2012 at 12:36:36PM -0500, Jon Ciesla wrote: > On Fri, Apr 13, 2012 at 12:32 PM, Richard W.M. Jones <rjones@xxxxxxxxxx> wrote: > > On Fri, Apr 13, 2012 at 05:37:12PM +0200, Mattia Verga wrote: > >> Greetings, > >> I saw the changes in packaging guidelines related to PIE: > >> > >> /If your package meets the following criteria you *MUST* enable the > >> PIE compiler flags: / > >> > >> * /Your package is long running. This means it's likely to be started > >> and keep running until the machine is rebooted, not start on demand > >> and quit on idle. / > >> > >> * /Your package has suid binaries, or binaries with capabilities. / > >> > >> * /Your package runs as root. / > > > > [from: http://fedoraproject.org/wiki/Packaging:Guidelines#PIE] > > > > I'm not sure I understand how to parse this. > > > > - Is the above an 'AND' or an 'OR' set of requirements? > > OR. > > > - What happens if the program isn't written in C? > > If it's not C, C++, etc, it's not applicable. I don't believe it > applies to other compiled languages. > Although (since I know Rich works on OCaml stuff) since OCaml is compiled to C before being compiled to object code, this section might still apply. Anyone with more knowledge on that want to speak up? -Toshio
Attachment:
pgpkfjHnEHxG7.pgp
Description: PGP signature
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
