One more thing to note about this is that we'd need to do a rebuild of
the remaining 186 packages with static libraries. In many cases, those
libraries will probably just vanish thanks to the !staticlibs default.

Static libraries aren't currently built as position independent unless
they're meant to be usable in dynamic libraries.

I think the only case where setting HARDENING_PIE=0 would be necessary
is to deal with proprietary static libraries that are non-PIC/PIE but
AFAIK there are none in the repositories anyway.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to