Re: [PATCH] [BZ #17841]: Build failure if compiler defaults to PIE

[Mike Frysinger <vapier at gentoo dot org>]

On 28 May 2015 06:05, H.J. Lu wrote:
> To support building glibc with GCC 6 configured with --enable-default-pie,
> which generates PIE by default, we need to build programs as PIE.  But
> elf/tst-dlopen-aout must not be built as PIE since it tests dlopen on
> ET_EXEC file and PIE is ET_DYN.

i think you're going to need more patches than this to make it work.  Gentoo
has been building glibc this way for years though in our hardened project.
we currently have:
https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=f14f39cfd7b959c806d822a2f6863873151f0a83
https://sources.gentoo.org/sys-libs/glibc/files/2.20/glibc-2.20-hardened-inittls-nosysenter.patch

and also this one (which your patch partially covers):
https://sources.gentoo.org/sys-libs/glibc/files/2.17/glibc-2.17-hardened-pie.patch
although iirc, this one depends on changes in gcc itself related to producing 
pie by default.  it might need tweaking when aligning Gentoo's patches and the 
gcc-6 behavior.

> OK for master?

looks ok to me, but prob want to give time for others to comment
-mike

Attachment: signature.asc
Description: Digital signature