smf
smf copied to clipboard
pass -fPIC to all deps
Just like we did for boost, we need to pass test that we are always building ourselves and deps with -fPIC so we can ship binaries around servers.
/cc @noahdesu
➜ debug git:(master) hardening-check bin/smf_demo_server
bin/smf_demo_server:
Position Independent Executable: no, normal executable!
Stack protected: yes
Fortify Source functions: no, only unprotected functions found!
Read-only relocations: yes
Immediate binding: no, not found!
https://capsule8.com/blog/millions-of-binaries-later-a-look-into-linux-hardening-in-the-wild/