2 Commits

Author	SHA1	Message	Date
Daniel P. Berrange	c03eff7717	Don't enable -fPIE on Win32 platforms ... On win32, all code is position independent and adding -fPIE to the compiler flags results in warnings being printed Signed-off-by: Daniel P. Berrange <berrange@redhat.com>	2013-04-15 17:35:30 +01:00
Daniel P. Berrange	1150999ca4	Build all binaries with PIE ... PIE (position independent executable) adds security to executables by composing them entirely of position-independent code (PIC. The .so libraries already build with -fPIC. This adds -fPIE which is the equivalent to -fPIC, but for executables. This for allows Exec Shield to use address space layout randomization to prevent attackers from knowing where existing executable code is during a security attack using exploits that rely on knowing the offset of the executable code in the binary, such as return-to-libc attacks. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>	2013-04-03 16:19:35 +01:00