F22 System Wide Change: Harden all packages with position-independent code

[Dennis Gilmore]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 19 Jan 2015 12:58:06 +0100
Florian Weimer <fweimer at redhat.com> wrote:

> On 01/07/2015 02:30 PM, Josh Boyer wrote:
> > We just went over something very much like this for x86_64 packages
> > with FESCo ticket 1113:
> >
> > https://fedorahosted.org/fesco/ticket/1113
> >
> > Could you perhaps review that and elaborate on the differences
> > between that proposal and this one if there are any?
> 
> GCC 5 and recent binutils support copy relocations, so the
> performance impact of PIE is reduced even further.
> 
> I wrote a slightly broader proposal, also covering SSE2 (for i386),
> and (since today) off_t and ino_t:
> 
>    <https://fedoraproject.org/wiki/Changes/Modernise_GCC_Flags>

Fedoraś minimally supported 32 bit system that has a massive (in the
millions of units) deployments is the OLPC XO-1  which does not have
sse at all. so you would be cutting off the largest part of 32 bit
fedora deployments.

you also fail to cover armv7hl or any of the secondary arches in your
proposal.  At the least you need to say its x86 only but you should
evaluate all supported fedora arches.

Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=zkmK
-----END PGP SIGNATURE-----