Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Fedora Packaging (http://www.linux-archive.org/fedora-packaging/)
-   -   Guideline change request: make PIE 'must' instead of 'should' (http://www.linux-archive.org/fedora-packaging/637143-guideline-change-request-make-pie-must-instead-should.html)

Bill Nottingham 02-24-2012 04:21 PM

Guideline change request: make PIE 'must' instead of 'should'
 
https://fedorahosted.org/fpc/ticket/144

The guidelines currently read:

...
If your package meets the following critera you should consider enabling the
PIE compiler flags:

Your package is long running. This means it's likely to be started and
keep running until the machine is rebooted, not start on demand and quit on
idle.

Your package has suid binaries, or binaries with capabilities.

Your package runs as root.

Your package accepts/processes untrusted input.
...

I'd like to change this from 'should' to 'must'. I do not believe there are
convincing performance reasons that we have found that would require not
using it for packages that fit this criteria. The only concern would be
programs that don't work as PIE ... those can be treated as exceptions.

Comments?

Bill
--
packaging mailing list
packaging@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/packaging


All times are GMT. The time now is 11:00 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.