Re: position independent executables (PIE) on Debian?

[Joe Smith]

So is there a way to get PIE executables with random addresses on
Debian?
Yes, download the debian kernel source, and apply either the PaX, or Exec 
shield patch. 




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

position independent executables (PIE) on Debian?

[Urs Thuermann]

Newer versions of gcc and binutils support generation of position
independent executables (PIE) using the option -fpie for gcc and -pie
for ld.  the result is a ELF shared object that can be executed
instead of a ELF executable.  The difference is that PIE executables
can be loaded at any address and support address randomization in
order to make vulnerability exploits harder.

In Debian you can create and execute such PIE executables but their
address spaces are not randomized (I've checked with printf() and cat
/proc//maps).  I assume you need kernel support for this and the
standard Debian kernel doesn't have it.

So is there a way to get PIE executables with random addresses on
Debian?


urs


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]