From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-dev+bounces-49540-garchives=archives.gentoo.org@lists.gentoo.org>) id 1RpPw0-0000Ud-2Z for garchives@archives.gentoo.org; Mon, 23 Jan 2012 19:52:08 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9FB59E0B56; Mon, 23 Jan 2012 19:51:58 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id CBE59E0B41 for <gentoo-dev@lists.gentoo.org>; Mon, 23 Jan 2012 19:51:32 +0000 (UTC) Received: from mail-pz0-f53.google.com (mail-pz0-f53.google.com [209.85.210.53]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: floppym) by smtp.gentoo.org (Postfix) with ESMTPSA id 2D5251B4028 for <gentoo-dev@lists.gentoo.org>; Mon, 23 Jan 2012 19:51:31 +0000 (UTC) Received: by dadv6 with SMTP id v6so1688063dad.40 for <gentoo-dev@lists.gentoo.org>; Mon, 23 Jan 2012 11:51:29 -0800 (PST) Precedence: bulk List-Post: <mailto:gentoo-dev@lists.gentoo.org> List-Help: <mailto:gentoo-dev+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org> X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Received: by 10.68.72.198 with SMTP id f6mr24317110pbv.6.1327348289838; Mon, 23 Jan 2012 11:51:29 -0800 (PST) Received: by 10.142.132.3 with HTTP; Mon, 23 Jan 2012 11:51:29 -0800 (PST) In-Reply-To: <CAHmME9r_7J8+6jLK+Fc36F8XiMny6pmaL7E3n4DfOtoFTrj4pQ@mail.gmail.com> References: <CAHmME9oDzehZRbOM90u4viQa+xQuHQGyZfcvtqY-8JEWfDSUdA@mail.gmail.com> <1327346549.60706.35.camel@titan.home.flameeyes.eu> <CAHmME9q1-C3i35G3rWjpiSS5+S-MLKeLfhiA_X_DyOVCv0WH+Q@mail.gmail.com> <1327347460.60706.44.camel@titan.home.flameeyes.eu> <CAHmME9r_7J8+6jLK+Fc36F8XiMny6pmaL7E3n4DfOtoFTrj4pQ@mail.gmail.com> Date: Mon, 23 Jan 2012 14:51:29 -0500 Message-ID: <CAJ0EP40fFda0P7crD6_UAjXBr-1dioxbVv5cqoV3fNaBCOQ7OA@mail.gmail.com> Subject: Re: [gentoo-dev] Re: Can we get PIE on all SUID binaries by default, por favor? From: Mike Gilbert <floppym@gentoo.org> To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: 2f5dd355-1c25-45ed-b6e7-b148336d3244 X-Archives-Hash: 3dda0fbdb5b579f712efd32968f65c4d On Mon, Jan 23, 2012 at 2:40 PM, Jason A. Donenfeld <Jason@zx2c4.com> wrote: > That way, package maintainers could fix things up bit by bit, without having > to burden you alone with tinderbox troubles. How do I go about testing with PIE/ASLR on my own box? Is it just some CFLAGS? A link to some documentation would or just a quick set of instructions would be great.