3 ms·
"because distros do not compile `su` with PIE" Really? Every single distro I've tested has su compiled with PIE.
by foobarbazetc 15y ago
"because distros do not compile `su` with PIE"
Really? Every single distro I've tested has su compiled with PIE.
- gioele 15y agoFrom the article: > It turns out that su on the vast majority of distros is not compiled with PIE, disabling ASLR for the .text section of the binary! I tested on Ubuntu 10.04 LTS, likely to be installed on many servers, and 11.04. On these two versions `su` has not been compiled with PIE. Edit: just to make things clear: in these Ubuntu versions su is compiled without PIE, but are not vulnerable because they have kernels < 2.6.39.