[Pkg-samba-maint] Bug#509135: please enable PIE during configure

Kees Cook kees at debian.org
Fri Dec 19 00:53:08 UTC 2008


Hi,

On Thu, Dec 18, 2008 at 04:39:01PM -0800, Steve Langasek wrote:
> On Thu, Dec 18, 2008 at 10:51:28AM -0800, Kees Cook wrote:
> > Hello!  Please enable PIE support in the build, since this is correctly
> > handled in the upstream build scripts (and is an upstream default).
> > This gains a measure of additional security on kernels that randomize
> > relocatable program segments.
> 
> Bug #346416 is the reason this was disabled in the first place.

That should be a bug in gdb, not in samba.  Bug 346409 is open with a
patch to handle PIE.

> Does gdb handle PIE better these days?

Currently Debian's gdb does not handle PIE.  The above bug, if closed,
would solve this.

-- 
Kees Cook                                            @debian.org





More information about the Pkg-samba-maint mailing list