Is there any way to force PIE?
Posted: Fri Sep 06, 2013 6:32 pmI think that's what RANDEXEC used to do, right? Randomize the base address of the executable? I know it's not supported anymore, but is there some other way to accomplish this?
Page 1 of 1
Posted: Fri Sep 06, 2013 6:32 pmRe: Is there any way to force PIE?
Posted: Sat Sep 07, 2013 7:16 pmRANDEXEC was a kernel-only approach to accomplish a similar effect to what randomizing the load address of a PIE binary has - all without actually having to build a PIE. so RANDEXEC didn't 'force PIE', it worked with normal ELF executables and it really wasn't the best way to accomplish executable randomization and existed mostly to prove that it was possible to do it at all. so no, there's no other way, if you want to randomize the executables as well, build them as PIE.
Re: Is there any way to force PIE?
Posted: Sat Sep 07, 2013 9:42 pmAlright, thank you.
Re: Is there any way to force PIE?
Posted: Tue Oct 29, 2013 4:26 pmCan it be that an option is to by default build them with PIE? Why distributions provide RELRO,Canary,PIE etc. for binaries for the system /sbin/* and NOT for the ones the user compiles?