On Thu, Jul 08, 2010, Jamie Bennett wrote:
- lool to check that -fPIE support is currently enabled in the Linaro
toolchain.
So it's not, but Ubuntu uses a package called hardening-wrapper which will replace gcc, cc etc. and insert -fPIE in the compiler flags during builds. These are the packages build-depending on it: amavisd-new apache2 aria2 asterisk autotrust bind9 bird botan1.8 confget cookietool cups cyrus-sasl2 dhcp3 dma donkey dovecot exim4 firefox grap gtkcookie gweled hexer hfsprogs ipsec-tools irqbalance isoquery jd jed kaptain ldns libdebug libhsm libpam-script limo mysql-5.1 mysql-cluster-7.0 nagios3 nast nsd3 ntp opendnssec-signer openldap php5 postfix postgresql-8.4 prips qliss3d quagga robodoc rtpproxy sendmail ser slrn softhsm squid strongswan switchsh tina tnftp wireshark worker xinetd xmahjongg xulrunner-1.9.2 zoem
Nicolas: to test you probably should be able to install hardening-wrapper on your system, build your test case, and then verify it works. Don't forget to remove it afterwards to not pollute your builds.
Cheers,