On 2016-05-21 19:32, Theodore Ts'o wrote:
> What is the suggested workaround if you have a package that has both
> executables and shared libraries, and you want to enable pie
> hardening for the executables?

Here's one possible solution:

    
https://sources.debian.net/src/keyutils/1.5.9-9/debian/patches/hardening.patch/

I've applied this pattern to a number of packages and it works quite well.

Regards,
Christian

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to