= Proposed Self Contained Change: Golang buildmode PIE = https://fedoraproject.org/wiki/Changes/golang-buildmode-pie Change owner(s): * Jakub Čajka <jcajka AT fedoraproject DOT org> Change default build mode of golang in Fedora packaging macros to buildmode=pie, which results in packages using them to produce Position Independent Executables. Another part of the change is to pass the Fedora hardened linker flags to the external linker(regular system linker). In result reducing exploit-ability of binaries. == Detailed Description == Change default build mode of golang in Fedora packaging macros to buildmode=pie, which results in packages using them to produce Position Independent Executables. Another part of the change is to pass the Fedora hardened linker flags to the external linker(regular system linker). This will only affect packages that depend on golang packaging macros for their build. This should be first step towards mandating this on all packages that provide binaries based on golang in whole distribution via Go packaging guidelines(which is out of scope for this change proposal). == Scope == * Proposal owners: change the Go packaging macros, resolve possible issue encountered * Other developers: help with resolving any issues encountered * Release engineering: none as mass-rebuild is scheduled * List of deliverables: N/A (not a System Wide Change) * Policies and guidelines: none * Trademark approval: N/A (not needed for this Change) -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
