d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5608fd23c2
freebsd-dev/sbin
History
Bryan Drewery 5608fd23c2 Revert r267233 for now. PIE support needs to be reworked. 
1. 50+% of NO_PIE use is fixed by adding -fPIC to INTERNALLIB and other
   build-only utility libraries.
2. Another 40% is fixed by generating _pic.a variants of various libraries.
3. Some of the NO_PIE use is a bit absurd as it is disabling PIE (and ASLR)
   where it never would work anyhow, such as csu or loader. This suggests
   there may be better ways of adding support to the tree. Many of these
   cases can be fixed such that -fPIE will work but there is really no
   reason to have it in those cases.
4. Some of the uses are working around hacks done to some Makefiles that are
   really building libraries but have been using bsd.prog.mk because the code
   is cleaner. Had they been using bsd.lib.mk then NO_PIE would not have
   been needed.

We likely do want to enable PIE by default (opt-out) for non-tree consumers
(such as ports). For in-tree though we probably want to only enable PIE
(opt-in) for common attack targets such as remote service daemons and setuid
utilities. This is also a great performance compromise since ASLR is expected
to reduce performance. As such it does not make sense to enable it in all
utilities such as ls(1) that have little benefit to having it enabled.

Reported by:	kib
2014-08-19 15:04:32 +00:00
..
adjkerntz use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
atm Fix atmconfig compilation when MK_ATM == yes and MK_BSNMP == no 2014-08-15 21:22:49 +00:00
badsect Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
bsdlabel Remove ia64. 2014-07-07 00:27:09 +00:00
camcontrol Add persistent reservation support to camcontrol(8). 2014-07-03 23:09:44 +00:00
casperd use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
ccdconfig Sweep man pages replacing ad -> ada. 2013-10-01 18:41:53 +00:00
clri Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
comcontrol A number of places in the source tree still reference cuad.* after 2012-12-08 22:16:36 +00:00
conscontrol Changed "conscontrol unset" to accept an existing virtual 2011-04-18 20:28:07 +00:00
ddb remove duplicate semicolons where possible. 2012-10-22 03:00:37 +00:00
devd Remove bogus ; at the end of the if condition in order to unbreak gcc builds 2014-08-15 10:01:33 +00:00
devfs Clarify how "hide" and "unhide" commands work on directories. 2013-07-12 06:03:25 +00:00
dhclient Add LIBUTIL to DPADD 2014-08-18 01:21:41 +00:00
dmesg Move the check whether the clear flag is set. This has 2 advantages 2013-06-11 17:46:32 +00:00
dump Mark non-returning function as such 2012-11-29 05:16:50 +00:00
dumpfs When running the -m option to generate a newfs(8) command suitable for 2013-05-16 20:07:08 +00:00
dumpon Adapt to the fact that minidumps are now on by default. 2013-04-30 07:22:03 +00:00
etherswitchcfg Check the number of returned entries before doing any access to ifm_ulist. 2014-07-05 20:16:02 +00:00
fdisk Remove ia64. 2014-07-07 00:27:09 +00:00
fdisk_pc98 Change <sys/diskpc98.h> to not redefine the same symbols that are 2013-08-07 00:00:48 +00:00
ffsinfo use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
fsck Revert r267233 for now. PIE support needs to be reworked. 2014-08-19 15:04:32 +00:00
fsck_ffs Avoid segment fault when attempting to clean up cylinder group 2014-03-12 01:28:21 +00:00
fsck_msdosfs newfs_msdosfs: Respect FSFIXFAT 2014-07-14 21:32:40 +00:00
fsdb Replace all uses of libncurses and libtermcap with their wide character 2014-07-17 18:24:34 +00:00
fsirand use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
gbde use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
geom Turn off kern.geom.part.mbr.enforce_chs by default. 2014-08-12 10:31:31 +00:00
ggate use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
growfs use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
gvinum Replace all uses of libncurses and libtermcap with their wide character 2014-07-17 18:24:34 +00:00
hastctl use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
hastd Add -ll to LDADD to fix "make checkdpadd" 2014-08-18 00:50:09 +00:00
ifconfig Zero buffer before request. 2014-08-18 08:07:50 +00:00
init Remove LOG_ODELAY because it does nothing. 2014-08-17 19:06:26 +00:00
ipf Revert r267233 for now. PIE support needs to be reworked. 2014-08-19 15:04:32 +00:00
ipfw mdoc: remove superfluous paragraph macros. 2014-06-23 18:40:21 +00:00
iscontrol Reword the part about mutual CHAP. 2013-12-17 10:33:27 +00:00
kldconfig use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
kldload use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
kldstat use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
kldunload use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
ldconfig Add a comment about why aout support is still here: We need it for 2013-03-19 16:57:04 +00:00
md5 use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
mdconfig use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
mdmfs Remove trailing whitespace per mdoc lint warning 2012-03-29 05:02:12 +00:00
mknod Fix some more warnings found by clang. 2010-11-22 20:10:48 +00:00
mksnap_ffs Note that a UFS filesystem can have up to 20 active snapshots. 2011-02-15 07:25:54 +00:00
mount Bring in the new automounter, similar to what's provided in most other 2014-08-17 09:44:42 +00:00
mount_cd9660 use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
mount_fusefs mdoc: remove superfluous paragraph macros. 2014-06-23 18:40:21 +00:00
mount_msdosfs use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
mount_nfs Provide -o vers= support for mount_nfs. 2014-08-05 12:04:40 +00:00
mount_nullfs GC unused variables. Prefer NULL over 0 for pointers. 2013-03-05 22:41:35 +00:00
mount_udf Unbreak mount_udf by passing the correct iovec length into 2014-02-04 21:15:15 +00:00
mount_unionfs use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
nandfs mdoc: remove superfluous paragraph macro. 2012-05-17 11:29:22 +00:00
natd mdoc: remove superfluous paragraph macros. 2014-06-23 18:40:21 +00:00
newfs Refer newfs and growfs users to fsck_ffs instead of 2014-02-09 14:28:47 +00:00
newfs_msdos Use "NO NAME" as the default unnamed label. 2014-08-13 21:18:31 +00:00
newfs_nandfs use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
nfsiod - Display current settings when run without options. 2009-12-26 08:36:02 +00:00
nos-tun use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
nvmecontrol use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
pfctl mdoc: remove superfluous paragraph macros. 2014-06-23 18:40:21 +00:00
pflogd pflogd does not depend on libutil 2013-01-01 18:28:21 +00:00
ping Use src.opts.mk in preference to bsd.own.mk except where we need stuff 2014-05-06 04:22:01 +00:00
ping6 When interval is set to very small value with limited amount of packets, 2014-07-28 08:22:08 +00:00
quotacheck Fix sbin/ build with a 64-bit ino_t. 2012-09-27 23:31:06 +00:00
rcorder Revert r267233 for now. PIE support needs to be reworked. 2014-08-19 15:04:32 +00:00
reboot use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
recoverdisk use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
resolvconf Add resolvconf(8) which manages resolv.conf. 2011-03-18 12:18:52 +00:00
restore When restoring a UFS dump onto a ZFS filesystem, an assertion in 2014-07-30 14:52:04 +00:00
route Fix incorrect netmasks being passed via rtsock. 2014-05-08 11:56:06 +00:00
routed mdoc sweep 2013-05-13 18:13:50 +00:00
rtsol NO_MAN= has been deprecated in favor of MAN= for some time, go ahead 2014-04-13 05:21:56 +00:00
savecore Fix double fclose() in an error case. 2014-04-14 21:44:34 +00:00
sconfig use .Mt to mark up email addresses consistently (part1) 2014-06-20 09:40:43 +00:00
setkey Fix spelling of Camellia algorithm. While here, replace blank lines 2014-07-25 17:09:48 +00:00
shutdown Add simple example. 2013-03-19 21:40:14 +00:00
spppcontrol mdoc: order prologue macros consistently by Dd/Dt/Os 2010-04-14 19:08:06 +00:00
sunlabel mdoc: fix column names, indentation, column separation within each row, and 2012-04-07 09:05:30 +00:00
swapon swapon: Fix buffer overflow when configuring encrypted swap on GBDE. 2013-12-21 11:59:58 +00:00
sysctl Don't hide zero-length strings when doing sysctl listings. 2014-06-27 15:23:12 +00:00
tests Migrate tools/regression/sbin/ to the new tests layout. 2014-03-16 02:07:08 +00:00
tunefs Constify string pointers. 2013-05-16 21:04:56 +00:00
umount Use mount protocol version 3 by default for showmount and umount. 2014-08-16 14:56:11 +00:00
Makefile Use src.opts.mk in preference to bsd.own.mk except where we need stuff 2014-05-06 04:22:01 +00:00
Makefile.amd64 Integrate nvmecontrol(8) into the amd64 and i386 builds. 2012-09-17 21:41:38 +00:00
Makefile.arm MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.i386 Integrate nvmecontrol(8) into the amd64 and i386 builds. 2012-09-17 21:41:38 +00:00
Makefile.inc Use src.opts.mk in preference to bsd.own.mk except where we need stuff 2014-05-06 04:22:01 +00:00
Makefile.mips MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.pc98 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.sparc64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00