Re: [gentoo-user] Am I in trouble now?

[Marc Joliet]

Am Sonntag, 3. Dezember 2017, 19:56:19 CET schrieb tuxic@××××××.de:
> Hi,
>
> From the news I did everything to switch to the 17th profile EXCEPT
> emerge -e @world.
>
> One application which was recompiled was gcc-7.20.
>
> From my undertsand/point of view gcc now has to have the PIE-feature
>
> gcc-bin/7.2.0>l
> total 6676
> lrwxrwxrwx 1 root root      23 2017-12-02 16:36 c++ ->
> x86_64-pc-linux-gnu-c++ lrwxrwxrwx 1 root root      23 2017-12-02 16:36 cpp
> -> x86_64-pc-linux-gnu-cpp lrwxrwxrwx 1 root root      23 2017-12-02 16:36
> g++ -> x86_64-pc-linux-gnu-g++ lrwxrwxrwx 1 root root      23 2017-12-02
> 16:36 gcc -> x86_64-pc-linux-gnu-gcc -rwxr-xr-x 2 root root   26896
> 2017-12-02 16:36 gcc-ar
> -rwxr-xr-x 2 root root   26896 2017-12-02 16:36 gcc-nm
> -rwxr-xr-x 2 root root   26896 2017-12-02 16:36 gcc-ranlib
> lrwxrwxrwx 1 root root      24 2017-12-02 16:36 gcov ->
> x86_64-pc-linux-gnu-gcov -rwxr-xr-x 1 root root  495400 2017-12-02 16:36
> gcov-dump
> -rwxr-xr-x 1 root root  515944 2017-12-02 16:36 gcov-tool
> lrwxrwxrwx 1 root root      28 2017-12-02 16:36 gfortran ->
> x86_64-pc-linux-gnu-gfortran -rwxr-xr-x 2 root root 1002192 2017-12-02
> 16:36 x86_64-pc-linux-gnu-c++ -rwxr-xr-x 1 root root  998096 2017-12-02
> 16:36 x86_64-pc-linux-gnu-cpp -rwxr-xr-x 2 root root 1002192 2017-12-02
> 16:36 x86_64-pc-linux-gnu-g++ -rwxr-xr-x 1 root root  998096 2017-12-02
> 16:36 x86_64-pc-linux-gnu-gcc lrwxrwxrwx 1 root root      23 2017-12-02
> 16:36 x86_64-pc-linux-gnu-gcc-7.2.0 -> x86_64-pc-linux-gnu-gcc -rwxr-xr-x 2
> root root   26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-ar -rwxr-xr-x 2
> root root   26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-nm -rwxr-xr-x 2
> root root   26896 2017-12-02 16:36 x86_64-pc-linux-gnu-gcc-ranlib
> -rwxr-xr-x 1 root root  639312 2017-12-02 16:36 x86_64-pc-linux-gnu-gcov
> -rwxr-xr-x 1 root root 1002192 2017-12-02 16:36
> x86_64-pc-linux-gnu-gfortran
>
>
> solfire:gcc-bin/7.2.0>checksec --file x86_64-pc-linux-gnu-c++
> RELRO           STACK CANARY      NX            PIE             RPATH
> RUNPATH	FORTIFY	Fortified Fortifiable  FILE Partial RELRO   Canary found
>   NX enabled    No PIE          No RPATH   No RUNPATH
> Yes	8		21	x86_64-pc-linux-gnu-c++
>
>
>
> So...No PIE it says.
>
> /root #>eselect profile show
> Current /etc/portage/make.profile symlink:
>   default/linux/amd64/17.0/no-multilib
>
> Before I start the rebuild of 2000++ packages ...
> Is this all correct up to this point?

Keep in mind that the news item literally says:

"2) Where supported, GCC will now build position-independent
   executables (PIE) by default."

Note the "Where supported" bit.  I don't know if that means "CPUs that this 
works with" or "profiles that support this", but it looks like the "pie" USE 
flag is forced globally in the profile and not deactivated in any of its sub-
profiles, so I'm tending to the former.

Of course, that doesn't mean that things are correct on your end, though.  On 
one of my computers, checksec does say "PIE enabled".  Maybe you should try 
compiling something else and verifying it.  After all, there's probably a 
reason why the "emerge -e @world" bit doesn't exclude any of the packages 
previously rebuilt.  I'll try to verify that on my desktop, though, which is 
the one out of three computers I haven't migrated yet -- both my home server 
and laptop have completed their "emerge -e @world" already (thankfully almost, 
but not entirely, without problems).

> Cheers
> Meino

HTH
-- 
Marc Joliet
--
"People who think they know everything really annoy those of us who know we
don't" - Bjarne Stroustrup