From owner-freebsd-current@FreeBSD.ORG Mon May 21 13:18:33 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EA25C16A482 for ; Mon, 21 May 2007 13:18:33 +0000 (UTC) (envelope-from ale@FreeBSD.org) Received: from andxor.it (relay.andxor.it [195.223.2.3]) by mx1.freebsd.org (Postfix) with SMTP id C3C1713C45A for ; Mon, 21 May 2007 13:18:32 +0000 (UTC) (envelope-from ale@FreeBSD.org) Received: (qmail 76284 invoked from network); 21 May 2007 12:51:49 -0000 Received: from unknown (HELO ale.andxor.it) (192.168.2.5) by andxor.it with SMTP; 21 May 2007 12:51:49 -0000 Message-ID: <465195E5.6000600@FreeBSD.org> Date: Mon, 21 May 2007 14:51:49 +0200 From: Alex Dupre User-Agent: Thunderbird 2.0.0.0 (X11/20070428) MIME-Version: 1.0 To: Harald Schmalzbauer References: <200705201954.00476.h.schmalzbauer@omnisec.de> <200705202130.55833.h.schmalzbauer@omnisec.de> <20070520184710.75db1335@kan.dnsalias.net> <200705211441.23211.h.schmalzbauer@omnisec.de> In-Reply-To: <200705211441.23211.h.schmalzbauer@omnisec.de> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-current@freebsd.org Subject: Re: What is -fPIE (GCC) good for? [Was: Re: strange "Exec format error" (gcc4.2 suspicious)] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2007 13:18:34 -0000 Harald Schmalzbauer ha scritto: > a quick search told me that pie means Posix Independant Executable. Position, not Posix. > Has anybody a link handy where I can find an explanation why one would want to > have this? From Wikipedia: Position-independent executables (PIE) are executable binaries made entirely from position-independent code. While some systems only run PIC executables, there are other reasons they are used. PIE binaries are used in some security-focused Linux distributions to allow PaX or Exec Shield to use address space layout randomization to prevent attackers from knowing where existing executable code is during a security attack using exploits that rely on knowing the offset of the executable code in the binary, such as return-to-libc attacks. -- Alex Dupre