Ubuntu
pidgin-otr package

  1. Bug #1000363
  2. Comment #8

Comment 8 for bug 1000363

Revision history for this message
Kees Cook (kees) wrote :

Ubuntu already builds by default with everything except PIE (and bindnow) from hardening-wrapper. Since it's a shared library (plugin), adding PIE wouldn't change anything.

https://wiki.ubuntu.com/Security/Features#fortify-source
https://wiki.ubuntu.com/ToolChain/CompilerFlags

$ hardening-check /usr/lib/pidgin/pidgin-otr.so
/usr/lib/pidgin/pidgin-otr.so:
 Position Independent Executable: no, regular shared library (ignored)
 Stack protected: yes
 Fortify Source functions: yes (some protected functions found)
 Read-only relocations: yes
 Immediate binding: no not found!