Am 15.10.2013 20:04, schrieb Miloslav Trmač: > On Tue, Oct 15, 2013 at 7:50 PM, Simo Sorce <simo@xxxxxxxxxx> wrote: >> Prelink does big disadvantages, otherwise nobody would care. >> One is about security, as it negates randomization of addresses, > > Most of the security benefit is, AFAICS, not negated by prelink (see > https://lists.fedoraproject.org/pipermail/devel/2013-April/181376.html > and following). try to understand what you read there * update installed * prelink doe *one time* randomization until the next update/full prelink there is no randomization because prelink a lot of binaries are not PIE code * update * reboot * applications are running * prelink does the one time randomization * the apps are still running and not randomized at all
Attachment:
signature.asc
Description: OpenPGP digital signature
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
