BuiltPIE

Differences between revisions 1 and 20 (spanning 19 versions)
Revision 1 as of 2008-11-19 17:47:08
Size: 471
Editor: sites
Comment:
Revision 20 as of 2010-10-07 08:05:00
Size: 3558
Editor: ecognosis
Comment: Fixed 10.10 heading from 9.10 to 10.10
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
== Built as Position Independent Executabes ==
 * Hardy
  * openssh
 * Intrepid
  * apache2
  * bind9
  * openldap
  * postfix
  * cups
  * postgresql-8.3
  * samba
  * dovecot
  * dhcp3
These packages are built with "hardening-wrapper", or similar native build options. The primary purpose is to gain PIE (and as of 9.10, {{{-Wl,-z,now}}}).

=== Supported Position Independent Executables in main ===
|| '''Source package''' || '''8.04 LTS''' || '''9.04''' || '''9.10''' || '''10.04 LTS''' || '''10.10''' ||
|| openssh (native) || yes || yes || yes || yes || yes ||
|| apache2 || -- || yes || yes || yes || yes ||
|| bind9 || -- || yes || yes || yes || yes ||
|| openldap || -- || yes || yes || yes || yes ||
|| postfix || -- || yes || yes || yes || yes ||
|| cups || -- || yes || yes || yes || yes ||
|| postgresql-8.3 || -- || yes || yes || yes || yes ||
|| samba (native) || -- || yes || yes || yes || yes ||
|| dovecot || -- || yes || yes || yes || yes ||
|| dhcp3 || -- || yes || yes || yes || yes ||
|| ntp || -- || -- || yes || yes || yes ||
|| amavisd-new || -- || -- || yes || yes || yes ||
|| squid || -- || -- || yes || yes || yes ||
|| cyrus-sasl2 || -- || -- || yes || yes || yes ||
|| exim4 || -- || -- || yes || yes || yes ||
|| nagios3 || -- || -- || yes || yes || yes ||
|| nagios-plugins || -- || -- || yes || yes || yes ||
|| xinetd || -- || -- || yes || yes || yes ||
|| ipsec-tools || -- || -- || yes || yes || yes ||
|| mysql-dfsg-5.1 || -- || -- || yes || yes || yes ||
|| evince || -- || -- || -- || yes || yes ||
|| firefox || -- || -- || -- || yes || yes ||


=== Community supported Position Independent Executables ===
|| '''Source package''' || '''8.04 LTS''' || '''9.04''' || '''9.10''' || '''10.04 LTS''' || '''10.10''' ||
|| asterisk || -- || -- || yes || yes || yes ||
|| sendmail || -- || -- || yes || yes || yes ||
|| openbsd-inetd || -- || -- || yes || yes || yes ||
|| wireshark || -- || -- || yes || yes || yes ||

These packages are built with "hardening-wrapper", or similar native build options. The primary purpose is to gain PIE (and as of 9.10, -Wl,-z,now).

Supported Position Independent Executables in main

Source package

8.04 LTS

9.04

9.10

10.04 LTS

10.10

openssh (native)

yes

yes

yes

yes

yes

apache2

--

yes

yes

yes

yes

bind9

--

yes

yes

yes

yes

openldap

--

yes

yes

yes

yes

postfix

--

yes

yes

yes

yes

cups

--

yes

yes

yes

yes

postgresql-8.3

--

yes

yes

yes

yes

samba (native)

--

yes

yes

yes

yes

dovecot

--

yes

yes

yes

yes

dhcp3

--

yes

yes

yes

yes

ntp

--

--

yes

yes

yes

amavisd-new

--

--

yes

yes

yes

squid

--

--

yes

yes

yes

cyrus-sasl2

--

--

yes

yes

yes

exim4

--

--

yes

yes

yes

nagios3

--

--

yes

yes

yes

nagios-plugins

--

--

yes

yes

yes

xinetd

--

--

yes

yes

yes

ipsec-tools

--

--

yes

yes

yes

mysql-dfsg-5.1

--

--

yes

yes

yes

evince

--

--

--

yes

yes

firefox

--

--

--

yes

yes

Community supported Position Independent Executables

Source package

8.04 LTS

9.04

9.10

10.04 LTS

10.10

asterisk

--

--

yes

yes

yes

sendmail

--

--

yes

yes

yes

openbsd-inetd

--

--

yes

yes

yes

wireshark

--

--

yes

yes

yes


CategorySecurityTeam

SecurityTeam/KnowledgeBase/BuiltPIE (last edited 2017-06-16 13:04:26 by jdstrand)