Re: Expanding the list of "Hardened Packages"

2013-03-29 Thread Reindl Harald
Am 29.03.2013 23:07, schrieb John Reiser: > On 03/29/2013, Reindl Harald wrote: > >>> -fPIE code is larger and takes longer to execute. The cost varies from >>> minimal (< 2%) in many cases to 10% or more for "non-dynamic" arrays on i686 >> >> i686 becomes more or less dead >> >> there could be

Re: Expanding the list of "Hardened Packages"

2013-03-29 Thread Reindl Harald
CC to the users list because this is a interesting topic at all Am 29.03.2013 18:48, schrieb John Reiser: >> Thinking from a security perspective, I find "Hardening flags can only >> be disabled for other packages at the maintainer's discretion provided >> enough justification is given to FESCo" t