On Sat, Nov 26, 2011 at 08:10:02PM -0500, Mike Frysinger wrote:
> On Saturday 26 November 2011 19:34:38 Paul Stone wrote:
> > Thanks Mike,
>
> please don't top post
>
> > Any idea why they are compiled as PIEs for CentOS (and presumably Red Hat)?
>
> i vaguely recall that RedHat's policy is to build all set*id and network
> daemons as PIEs as security precautions. Karel would probably know more.
Yes, copy & past from util-linux.spec:
export SUID_CFLAGS="-fpie"
export SUID_LDFLAGS="-pie"
%configure \
....
the SUID_* variable are supported by upstream, see
Documentation/howto-compilation.txt
Karel
--
Karel Zak <kzak@xxxxxxxxxx>
http://karelzak.blogspot.com
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
