Re: [Wireshark-dev] Wireshark and hardening flags

2015-09-24 Thread Gerald Combs
On 9/24/15 6:51 AM, Jeff Morriss wrote: > On 09/24/2015 05:04 AM, Alexis La Goutte wrote: >> Hi Balint >> >> No a problem for me to add PIE on Wireshark >> But no need to check if lib (Qt) use also PIE ? > > We already do--at least with autofoo (cmake seems to pick up the PIE flags > from Qt's con

Re: [Wireshark-dev] Wireshark and hardening flags

2015-09-24 Thread Jeff Morriss
On 09/24/2015 05:04 AM, Alexis La Goutte wrote: Hi Balint No a problem for me to add PIE on Wireshark But no need to check if lib (Qt) use also PIE ? We already do--at least with autofoo (cmake seems to pick up the PIE flags from Qt's config directly). But I don't think there's a problem if

Re: [Wireshark-dev] Wireshark and hardening flags

2015-09-24 Thread Alexis La Goutte
Hi Balint No a problem for me to add PIE on Wireshark But no need to check if lib (Qt) use also PIE ? Regards, On Thu, Sep 24, 2015 at 10:49 AM, Bálint Réczey wrote: > Hi All, > > I have just created a review to add PIE when it is available to default > flags: > https://code.wireshark.org/revi

[Wireshark-dev] Wireshark and hardening flags

2015-09-24 Thread Bálint Réczey
Hi All, I have just created a review to add PIE when it is available to default flags: https://code.wireshark.org/review/#/c/10635 I think this matter is worth discussion here, too. Should we enable more compiler flags which make Wireshark more secure by default? I Debian I will enable all harde