Ammar Askar added the comment:
Hi Jeffrey, your second solution where you omit `-pie` is almost there. Instead
of modifying the Makefile you can pass `-pie` in `LINKFORSHARED`:
export CFLAGS="-fPIC -fstack-protector-all -D_FORTIFY_SOURCE=2"
export CXXFLAGS="-fPIC -fstack-protector-all
New submission from Jeffrey Walton:
$ hg id
3736bf94535c+ tip
A standard Python build does not take a proactive approach to integrating with
platform security measures. Attepting to add the measures results in a failed
build.
For example:
export CC=/usr/bin/gcc
export CXX=/usr/bin/g++
Jeffrey Walton added the comment:
$ checksec.sh --file ./python
RELRO STACK CANARY NXPIE RPATH
RUNPATH FILE
Full RELRO Canary found NX enabledPIE enabled No RPATH No
RUNPATH ./python
Here's what a standard Python
