[Bug 2730] New: RFE: Add gcc's position independant executable (-fPIE) support to tree

[bugzilla-daemon at freedesktop.org]

Please do not reply to this email: if you want to comment on the bug, go to    
       
the URL shown below and enter yourcomments there.     
   
https://bugs.freedesktop.org/show_bug.cgi?id=2730          
     
           Summary: RFE: Add gcc's position independant executable (-fPIE)
                    support to tree
           Product: xorg
           Version: CVS_head
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: * Other
        AssignedTo: xorg-bugzilla-noise at freedesktop.org
        ReportedBy: mharris at www.linux.org.uk


Modern versions of the gcc compiler are able to build position independant
executables on Linux (and possibly other) platforms.  Position independant
executables (PIEs) provide additional security benefits against software
based attacks on known vulnerabilities, by randomizing the address locations
of the executable code.  This helps to greatly reduce the likelyhood of
a malicious attacker successfully exploiting a known security vulnerability.

PIE support pays a slight performance cost however, and the decision to
use it for a given application or not, depends on how critical the performance
of the application is, and how great the performance cost is when the app
is built as a PIE.

Applications which are network facing servers are prime candidates for
optionally being built as PIEs, as are network clients and SUID apps.

Several applications included in Xorg packaging are daemons,
or SUID apps, of which can benefit from being built with PIE
support.

This bug is a tracker bug to track PIE requests for enhancement
in X.Org X11.          
     
     
--           
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email         
     
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.