F22 System Wide Change: Harden all packages with position-independent code

[Florian Weimer]

On 01/09/2015 12:54 PM, Jakub Jelinek wrote:

>Also, the number of relocations and
> memory consumption got up.
> Non-PIE cc1plus:
> Relocation section '.rela.dyn' at offset 0x187d30 contains 190 entries:
> Relocation section '.rela.plt' at offset 0x188f00 contains 284 entries:
> GNU_RELRO      0x1d14730 0x0000000002314730 0x0000000002314730 0x0058d0 0x0058d0 R   0x1
> PIE cc1plus:
> Relocation section '.rela.dyn' at offset 0x187d90 contains 75803 entries:
> Relocation section '.rela.plt' at offset 0x344018 contains 230 entries:
> GNU_RELRO      0x1e18cf0 0x0000000002018cf0 0x0000000002018cf0 0x10e310 0x10e310 R   0x1
>
> That means e.g. on the startup of each cc1plus process, that means 1MB extra
> COW wastage (executable has 24KB of pages written and then made
> non-writable, while PIE over 1MB).

Odd.  Did you test with copy relocations enabled?

-- 
Florian Weimer / Red Hat Product Security