From 989e2c600051059839eb88abfc343a905caf37eb Mon Sep 17 00:00:00 2001 From: bdrewery Date: Sun, 8 Jun 2014 17:29:31 +0000 Subject: In preparation for ASLR [1] support add WITH_PIE to support building with -fPIE. This is currently an opt-in build flag. Once ASLR support is ready and stable it should changed to opt-out and be enabled by default along with ASLR. Each application Makefile uses opt-out to ensure that ASLR will be enabled by default in new directories when the system is compiled with PIE/ASLR. [2] Mark known build failures as NO_PIE for now. The only known runtime failure was rtld. [1] http://www.bsdcan.org/2014/schedule/events/452.en.html Submitted by: Shawn Webb Discussed between: des@ and Shawn Webb [2] --- libexec/mail.local/Makefile | 2 ++ libexec/rtld-elf/Makefile | 2 ++ libexec/smrsh/Makefile | 2 ++ libexec/telnetd/Makefile | 2 ++ 4 files changed, 8 insertions(+) (limited to 'libexec') diff --git a/libexec/mail.local/Makefile b/libexec/mail.local/Makefile index 3e59609..dff4238 100644 --- a/libexec/mail.local/Makefile +++ b/libexec/mail.local/Makefile @@ -9,6 +9,8 @@ SRCS= mail.local.c MAN= mail.local.8 CFLAGS+=-I${SENDMAIL_DIR}/include -I. +NO_PIE= yes + WARNS?= 2 WFORMAT=0 diff --git a/libexec/rtld-elf/Makefile b/libexec/rtld-elf/Makefile index 21e2219..ba13778 100644 --- a/libexec/rtld-elf/Makefile +++ b/libexec/rtld-elf/Makefile @@ -78,5 +78,7 @@ beforeinstall: .PATH: ${.CURDIR}/${RTLD_ARCH} +NO_PIE= yes + .include .include diff --git a/libexec/smrsh/Makefile b/libexec/smrsh/Makefile index ae86155..9f0bfd4 100644 --- a/libexec/smrsh/Makefile +++ b/libexec/smrsh/Makefile @@ -9,6 +9,8 @@ SRCS= smrsh.c MAN= smrsh.8 CFLAGS+=-I${SENDMAIL_DIR}/src -I${SENDMAIL_DIR}/include -I. +NO_PIE= yes + LIBSMDIR= ${.OBJDIR}/../../lib/libsm LIBSM= ${LIBSMDIR}/libsm.a diff --git a/libexec/telnetd/Makefile b/libexec/telnetd/Makefile index 4300d0d..a63b937 100644 --- a/libexec/telnetd/Makefile +++ b/libexec/telnetd/Makefile @@ -20,6 +20,8 @@ WFORMAT?= 0 CFLAGS+= -DLINEMODE -DUSE_TERMIO -DDIAGNOSTICS -DOLD_ENVIRON \ -DENV_HACK -DSTREAMSPTY +NO_PIE= yes + .if ${MK_INET6_SUPPORT} != "no" CFLAGS+= -DINET6 .endif -- cgit v1.1