Re: [gentoo-user] Profile 17 and -fPIC

2017-12-04 Thread Walter Dnes
On Tue, Dec 05, 2017 at 11:52:24AM +1100, Adam Carter wrote
> 
> Is there a downside to adding -fPIC to CFLAGs? It seems to allow
> everything to build and the system is working.

  It'll slow down some programs/libraries.  I wonder if you also need to
enable "USE="pic"...

[d531][waltdnes][~] grep -i ":pic - d" /usr/portage/profiles/use.local.desc 
app-arch/gzip:pic - disable optimized assembly code that is not PIC friendly
dev-util/electron:pic - Disable optimized assembly code that is not PIC friendly
games-emulation/yabause:pic - disable optimized assembly code that is not PIC 
friendly
games-fps/duke3d:pic - disable optimized assembly code that is not PIC friendly
media-libs/mesa:pic - disable optimized assembly code that is not PIC friendly
media-libs/x264:pic - disable optimized assembly code that is not PIC friendly
media-libs/x265:pic - Disable optimized assembly code that is not PIC friendly
media-libs/xvid:pic - disable optimized assembly code that is not PIC friendly
media-video/transcode:pic - disable optimized assembly code that is not PIC 
friendly
www-client/chromium:pic - Disable optimized assembly code that is not PIC 
friendly

...and also...

[d531][waltdnes][~] grep -i ":pic - f" /usr/portage/profiles/use.local.desc 
app-benchmarks/ramspeed:pic - Force shared libraries to be built as PIC (this 
is slower)
app-emulation/open-vm-tools:pic - Force shared libraries to be built as PIC
gnome-base/orbit:pic - Force libname-server-2 to be built as PIC; needed on 
hardened systems
media-libs/libpostproc:pic - Force shared libraries to be built as PIC (this is 
slower).
media-video/ffmpeg:pic - Force shared libraries to be built as PIC (this is 
slower)
media-video/libav:pic - Force shared libraries to be built as PIC (this is 
slower).

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



[gentoo-user] Profile 17 and -fPIC

2017-12-04 Thread Adam Carter
Possibly due to messing around with hardened in the past, i'm finding that
many packages are reporting that they need -fPIC now that i'm on 17.0 (and
gcc 7.2 FWIW). I've added it to CFLAGs, as manually adding to each failed
package via package.env was getting non-trivial.

>From the GCC man page it sounds like;
fPIE = make executables position independent, and
fPIC = make everything position independent

Is there a downside to adding -fPIC to CFLAGs? It seems to allow everything
to build and the system is working.