maria-developers team mailing list archive

[Reindl Harald <h.reindl@xxxxxxxxxxxxx>]

Am 02.04.2014 17:10, schrieb Otto Kekäläinen:
> I noticed that the MySQL packages in Debian have PIC stuff in their
> alternative build arguments, see
> http://anonscm.debian.org/gitweb/?p=pkg-mysql/mysql-5.6.git;a=blob;f=debian/rules
> http://anonscm.debian.org/gitweb/?p=pkg-mysql/mysql-5.5.git;a=blob;f=debian/rules
> 
> Anybody here who understands deeply the build arguments who could say
> if having these PIC additions is desirable?

surely because you want the result below these days
http://tk-blog.blogspot.co.at/2009/02/relro-not-so-well-known-memory.html

* PIC
* Full RELRO

[root@rh:~]$ /usr/bin/hardening-check /usr/libexec/mysqld
/usr/libexec/mysqld:
 Position Independent Executable: yes
 Stack protected: yes
 Fortify Source functions: yes (some protected functions found)
 Read-only relocations: yes
 Immediate binding: yes

Attachment: signature.asc
Description: OpenPGP digital signature