Gentoo Archives: gentoo-hardened

From: Daniel Reidy <dubkat@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Re: Remove the pic use flag in the hardened amd64 profile.
Date: Mon, 28 Feb 2011 21:02:42
Message-Id: AANLkTi=BHgRqZX9BUBPy=SNJWjOJOdsR6ZvnknPHN5Ev@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Re: Remove the pic use flag in the hardened amd64 profile. by pageexec@freemail.hu
1 On Sun, Feb 27, 2011 at 5:58 PM, <pageexec@××××××××.hu> wrote:
2 > that's actually not the intended use of the PIC USE flag, we wanted it originally
3 > to enable configuring/compiling position independent code for packages where one
4 > wanted to make a tradeoff between speed/security (i think php was one such app,
5 > even without any hand written asm code).
6 >
7 > so with USE=pic you were supposed to get a textrel free, but potentially slower
8 > binary (partly because of the PIC overhead on i386 and partly because sometimes
9 > it meant using the C implementation of some algo instead of hand written asm).
10
11 So if I understand this correctly, we should now be turning off PIC on
12 Gentoo-Hardened systems running on AMD64. What about the non-hardened
13 variety, such as my desktop, that is only running a "stock" version of
14 Gentoo Sources without hardened features?
15
16 -dan

Replies