[Pkg-samba-maint] Bug#509135: please enable PIE during configure

[Steve Langasek]

On Thu, Dec 18, 2008 at 04:53:08PM -0800, Kees Cook wrote:

> On Thu, Dec 18, 2008 at 04:39:01PM -0800, Steve Langasek wrote:
> > On Thu, Dec 18, 2008 at 10:51:28AM -0800, Kees Cook wrote:
> > > Hello!  Please enable PIE support in the build, since this is correctly
> > > handled in the upstream build scripts (and is an upstream default).
> > > This gains a measure of additional security on kernels that randomize
> > > relocatable program segments.

> > Bug #346416 is the reason this was disabled in the first place.

> That should be a bug in gdb, not in samba.  Bug 346409 is open with a
> patch to handle PIE.

Sure; but the ability to get meaningful backtraces out of samba was
considered more important in the near term.

> > Does gdb handle PIE better these days?

> Currently Debian's gdb does not handle PIE.  The above bug, if closed,
> would solve this.

Ok, then I think this bug unfortunately should be 'wontfix' until the gdb
bug is addressed.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org