Date: Sun, 23 Jan 2022 11:36:29 +0100 From: Marcin Wojtas <mw@semihalf.com> To: freebsd-current <freebsd-current@freebsd.org> Subject: HEADS-UP: PIE enabled by default on stable/13 Message-ID: <CAPv3WKeCfHMLXN72sdmZCY03jLG7u79_8=sg0cj3N9rDxsm4nw@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
--00000000000077bb5505d63d6d3d Content-Type: text/plain; charset="UTF-8" Hi, As of 396e9f259d962 the base system binaries are now built as position-independent executable (PIE) by default, for 64-bit architectures. Thanks to that enabling ASLR can be done simply by sysctls knobs when booting the kernel. If you track stable/13 and normally build WITHOUT_CLEAN you'll need to do one initial clean build -- either run `make cleanworld` or set WITH_CLEAN=yes. The change is a pure MFC of the changes integrated to -CURRENT early 2021 and no issues are expected, but in case any problems are observed, please issue a PR and/or let me know in this thread. Best regards, Marcin --00000000000077bb5505d63d6d3d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi,<div><br></div><div>As of=C2=A0396e9f259d962 the base s= ystem binaries are now built as position-independent executable (PIE) by de= fault, for 64-bit architectures. Thanks to that enabling ASLR can be done s= imply</div><div>by sysctls knobs when booting the kernel.<br><div><br></div= ><div>If you track stable/13 and normally build WITHOUT_CLEAN you'll ne= ed to do one initial clean build -- either run `make cleanworld` or set WIT= H_CLEAN=3Dyes.<br></div><div><br></div><div>The change is a pure MFC of the= changes integrated to -CURRENT early 2021 and no issues are expected, but = in case any problems are observed, please issue a PR and/or let me know in = this thread.</div></div><div><br></div><div>Best regards,</div><div>Marcin<= /div></div> --00000000000077bb5505d63d6d3d--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPv3WKeCfHMLXN72sdmZCY03jLG7u79_8=sg0cj3N9rDxsm4nw>