why -pie?

[Andrew Bartlett]

On Thu, 2006-12-21 at 09:54 +1100, tridge at samba.org wrote:
> Metze,
> 
> I've been bitten by the -pie compile flag in Samba3. I noticed you
> added it in r19093, can you explain why its needed?

My understanding is that on systems with address space randomisation,
-pie allows the random relocation of the binary, so as to improve
security, because pre-calculated attacks will fail.

see the Exec-Shield section in
http://fedoraproject.org/wiki/Security/Features

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20061221/53162063/attachment.bin