<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Kavitha -</p>
<p> In general, specialized security work is outside of the scope
of the <i>educational mission</i> at OSGeoLive project.</p>
<p> ASLR is a security layer ? from Google search..</p>
<p>"<span style="color: rgb(34, 34, 34); font-family: Roboto, arial,
sans-serif; font-size: 16px; font-style: normal;
font-variant-ligatures: normal; font-variant-caps: normal;
font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: left; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">Address Space
Layout Randomization (</span><b style="color: rgb(34, 34, 34);
font-family: Roboto, arial, sans-serif; font-size: 16px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; letter-spacing: normal; orphans: 2;
text-align: left; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-style: initial; text-decoration-color:
initial;">ASLR</b><span style="color: rgb(34, 34, 34);
font-family: Roboto, arial, sans-serif; font-size: 16px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 400; letter-spacing:
normal; orphans: 2; text-align: left; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-style:
initial; text-decoration-color: initial; display: inline
!important; float: none;">) is a computer security technique
which involves randomly positioning the base address of an
executable and the position of libraries, heap, and stack, in a
process's address space"</span></p>
<div class="moz-cite-prefix">Security is a concern at OSGeoLive, but
not the primary concern. If you seek direct consulting hours,
please consider a time+money budget to bring in additional
skillsets.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">If you find a solution, please do not
hesitate to share the results with the GDAL project and Ubuntu
upstream, for better specialized security in the future. <br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"> others may have different resources
for you on this topic<br>
</div>
<div class="moz-cite-prefix"> best regards --Brian<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 8/5/20 7:32 AM, Kavitha K wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CACLbJJf4EqLvfa6Kvpb-nnREs3mGCKh5_7Df-tZTuJvTOV_JaA@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi All,
<div> We are trying to compile the gdal 2.3.2 source with ASLR .
But we are seeing the<br>
Elf file type as EXEC (Executable file) instead DYN.<br>
<br>
Please help us whether gdal build is supported the
compilation with "-Fpie -pie -fPIC".<br>
<br>
Steps which we followed:<br>
<br>
cp gdalDevKits/gdal-2.3.2.tar.gz .<br>
<br>
tar -xvf gdal-2.3.2.tar.gz<br>
<br>
cd gdal-2.3.2<br>
<br>
env CFLAGS="-Fpie -pie -fPIC" ./configure<br>
<br>
make install<br>
<br>
cd /usr/local/bin<br>
<br>
readelf -l gdaltransform<br>
<br>
Elf file type is EXEC (Executable file)<br>
<br>
Entry point 0x40<br>
</div>
<div>Thanks,</div>
<div>Kavitha</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
osgeolive mailing list
<a class="moz-txt-link-abbreviated" href="mailto:osgeolive@lists.osgeo.org">osgeolive@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/osgeolive">https://lists.osgeo.org/mailman/listinfo/osgeolive</a>
</pre>
</blockquote>
</body>
</html>