Re: Updated patch for pkgsrc hardening

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Tue, Mar 01, 2016 at 01:03:06AM +0100, Pierre Pronchery wrote:
> +.if ${PKGSRC_MKPIE:Uyes} != "no"
> +# build position-independent code (with GCC, for ASLR)
> +PIE_CFLAGS?=	-fPIC
> +# XXX for executables it should be:
> +# PIE_CFLAGS?=	-fPIE
> +_GCC_CFLAGS+=	${PIE_CFLAGS}
> +PIE_LDFLAGS?=	-Wl,-pie -shared-libgcc
> +# XXX for libraries a sink wrapper around gcc is required
> +# _GCC_LDFLAGS+=-Wl,-pie
> +.endif

As I already said the last time, this is still the wrong way to link
PIE.

Joerg