From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id A0F32139083 for ; Sun, 3 Dec 2017 20:22:49 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 403A1E0EE1; Sun, 3 Dec 2017 20:22:43 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 86F9EE0E43 for ; Sun, 3 Dec 2017 20:22:42 +0000 (UTC) Received: from thetick.localnet ([93.181.44.247]) by mail.gmx.com (mrgmx101 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MPppG-1eQWjU1a6M-0052TA for ; Sun, 03 Dec 2017 21:22:30 +0100 From: Marc Joliet To: Gentoo Subject: Re: [gentoo-user] Am I in trouble now? Date: Sun, 03 Dec 2017 21:22:23 +0100 Message-ID: <3161763.dWV9SEqChM@thetick> In-Reply-To: <20171203185619.n3ysxkc7bnrfrvxl@solfire> References: <20171203185619.n3ysxkc7bnrfrvxl@solfire> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart4940810.rdbgypaU67"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-Provags-ID: V03:K0:Yrp7ywszB7UcTE+ZlQNqqSCwMMYdgXMtnEcP04gvUhx79Ba4GdU SQfjhZ/Py4wWfyVlJDcI6Kn9s60PWriXNWy39XyCRoNphB83qRTyll/nf4fKR00NdYCfvjr xN9Y5/pAQ1vpTT9iM3Vb0nVL7A4n21N93Qb+NnnRiz8o8QQDav695aLxIUhhsI0ym8FRR07 PkLOTVqUL4kmHqh8Ha2PA== X-UI-Out-Filterresults: notjunk:1;V01:K0:vkysUgyUN+E=:Tbjbk3bC4U146xxReN5ZUI GkhCSMiiCX0zJO4EOIoszpPZ3RQzxnJZznXu2BVm/vTO3LK1Ek6e94st1DHX6aDxSP0QW9Ytp 4IPD3lkGv7lYxYr3HOlftp/JEluq1GjFDsI+o/daMZp2ingpq/ACDBMvpjUi4fYovuuDwlo3A rkx38hD/VPGPuPckp36vP+Gld4+FOz9d1ly8CkVGWeISqbA/WwoN8CogW88C07zsu4BAR7CQQ 8iHRVl8/sivB1FNtsAUID9cRjlcqySCVVLgWXidtQErqxevzW2ZRkAHaA33kXzmoM466ETorh tJGL4BGdGaDEmg7ApeOWPfjC2Tn2xidSsm89Vu/SN9vUmA+Uq67Ia9Jm52kZqAs9OHQjjvwL9 DwTa6adEDOrG+UBDE4IEpZDqlfo+dWFbMOF/WcovVNRfwTJcjAD1GjLE0VXwDwLPpqtXhhnp3 jqNSqy37l6k6P0D9ps8UHehJHh52cDF6CjI8OGH2AmgH8/918+PpJV4Een2MogjDUqXeyRi7K yKTGDdTmjJTDRxA2WTCKzHOoOfbAj6ZkgELH5WrIrCRHlwFcR36zM91LlnWsGQ6sS/Ogw6mGA MK3CZOmidixnAYQ8SWlR66qMwcx7bEWTMr3uwzQr7kSxmAY2uc8wSlrnsjkdMvonNLodjOdMa fGcBF2oSAGWQGALY/wpbVTgM9YF/ENGcyKmYwm2XClMaVplR9Y0F5QiMh5EJSbX2eU5VZUL7h JV128en3wtpyGL/R6MeGtezvkbOodv7v87HbIf9fBz+EClEmgQuyQ8/yOyVY55gEtuybg+2ev +uBfiu9mgO1CuUeFffE9xhYGBQYBw== X-Archives-Salt: 918aab8e-0413-4d5c-bfe7-a4bf64d6a319 X-Archives-Hash: ef282b8eed1eaf9a5f959c317dfee220 --nextPart4940810.rdbgypaU67 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Am Sonntag, 3. Dezember 2017, 19:56:19 CET schrieb tuxic@posteo.de: > Hi, > > From the news I did everything to switch to the 17th profile EXCEPT > emerge -e @world. > > One application which was recompiled was gcc-7.20. > > From my undertsand/point of view gcc now has to have the PIE-feature > > gcc-bin/7.2.0>l > total 6676 > lrwxrwxrwx 1 root root 23 2017-12-02 16:36 c++ -> > x86_64-pc-linux-gnu-c++ lrwxrwxrwx 1 root root 23 2017-12-02 16:36 cpp > -> x86_64-pc-linux-gnu-cpp lrwxrwxrwx 1 root root 23 2017-12-02 16:36 > g++ -> x86_64-pc-linux-gnu-g++ lrwxrwxrwx 1 root root 23 2017-12-02 > 16:36 gcc -> x86_64-pc-linux-gnu-gcc -rwxr-xr-x 2 root root 26896 > 2017-12-02 16:36 gcc-ar > -rwxr-xr-x 2 root root 26896 2017-12-02 16:36 gcc-nm > -rwxr-xr-x 2 root root 26896 2017-12-02 16:36 gcc-ranlib > lrwxrwxrwx 1 root root 24 2017-12-02 16:36 gcov -> > x86_64-pc-linux-gnu-gcov -rwxr-xr-x 1 root root 495400 2017-12-02 16:36 > gcov-dump > -rwxr-xr-x 1 root root 515944 2017-12-02 16:36 gcov-tool > lrwxrwxrwx 1 root root 28 2017-12-02 16:36 gfortran -> > x86_64-pc-linux-gnu-gfortran -rwxr-xr-x 2 root root 1002192 2017-12-02 > 16:36 x86_64-pc-linux-gnu-c++ -rwxr-xr-x 1 root root 998096 2017-12-02 > 16:36 x86_64-pc-linux-gnu-cpp -rwxr-xr-x 2 root root 1002192 2017-12-02 > 16:36 x86_64-pc-linux-gnu-g++ -rwxr-xr-x 1 root root 998096 2017-12-02 > 16:36 x86_64-pc-linux-gnu-gcc lrwxrwxrwx 1 root root 23 2017-12-02 > 16:36 x86_64-pc-linux-gnu-gcc-7.2.0 -> x86_64-pc-linux-gnu-gcc -rwxr-xr-x 2 > root root 26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-ar -rwxr-xr-x 2 > root root 26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-nm -rwxr-xr-x 2 > root root 26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-ranlib > -rwxr-xr-x 1 root root 639312 2017-12-02 16:36 x86_64-pc-linux-gnu-gcov > -rwxr-xr-x 1 root root 1002192 2017-12-02 16:36 > x86_64-pc-linux-gnu-gfortran > > > solfire:gcc-bin/7.2.0>checksec --file x86_64-pc-linux-gnu-c++ > RELRO STACK CANARY NX PIE RPATH > RUNPATH FORTIFY Fortified Fortifiable FILE Partial RELRO Canary found > NX enabled No PIE No RPATH No RUNPATH > Yes 8 21 x86_64-pc-linux-gnu-c++ > > > > So...No PIE it says. > > /root #>eselect profile show > Current /etc/portage/make.profile symlink: > default/linux/amd64/17.0/no-multilib > > Before I start the rebuild of 2000++ packages ... > Is this all correct up to this point? Keep in mind that the news item literally says: "2) Where supported, GCC will now build position-independent executables (PIE) by default." Note the "Where supported" bit. I don't know if that means "CPUs that this works with" or "profiles that support this", but it looks like the "pie" USE flag is forced globally in the profile and not deactivated in any of its sub- profiles, so I'm tending to the former. Of course, that doesn't mean that things are correct on your end, though. On one of my computers, checksec does say "PIE enabled". Maybe you should try compiling something else and verifying it. After all, there's probably a reason why the "emerge -e @world" bit doesn't exclude any of the packages previously rebuilt. I'll try to verify that on my desktop, though, which is the one out of three computers I haven't migrated yet -- both my home server and laptop have completed their "emerge -e @world" already (thankfully almost, but not entirely, without problems). > Cheers > Meino HTH -- Marc Joliet -- "People who think they know everything really annoy those of us who know we don't" - Bjarne Stroustrup --nextPart4940810.rdbgypaU67 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEax7Ya5gDQFOJHKGQv9DmhiyIePQFAlokXP8ACgkQv9DmhiyI ePRW6A//V+I0aX4gJHIwWrreQ1JnsNx6YKFWCS6YfngauIkaeKzD1jcZVzmaCojt y7RycFbayB/JXFefOlGJVNkojcTOc0jW6HgCvJlxJ9cxotOn+kW3wxJ4ZMEK66rI K6B9PHp3/x7EG7bahjIXpnwbI56qxuskENvuwpgHt0qo35elI94zxpTTMcCluqOs KuhMFJ4vAnRgJ6LaTApVgzCrxhD/1YsAB/2YqfqmGvKmxNEwBs5F17slNiUnuAxs fA2ZILvaprhVhc9UV72WLqLmnzOpE0EBXL/VigMAsYxsmmx/60lBq+U2yzZRy13R qqEBQ6VzYmxW5DUDUsxJJXQweP35b430UIw3ezWRXoee5d9kVpV2LtdUer3LR7MF gvZAom3LohOliqfCprsrB+0NPS7oMwLTcKXWO+/49y37b5bbvlZSvVaY7l3MSdZ5 ClVHnREPlRZ+RJR1s4VR0iimj8qIPV4axZwB9tt5VtPJ5Pr2rSb1oa1p9nudgyH7 yf4ha3Pnd8NlHDmy+yyUrICaPjq0/Slg0kvqU/lZAVbzrPYyt5z/6CDJ+sm9V6kH lkB+g5IzZnUsE0v1luHhialaICZaQKn3+PVZLCU8nvIQSAmj1X6izCrc+7VFGbqk OAXYPtDnlheAm/3mZ/U/8573BTrW79Ze4WOqHZuXf3woReVWHuo= =IA3K -----END PGP SIGNATURE----- --nextPart4940810.rdbgypaU67--