[Development] -reduce-relocations vs hardening

[Lisandro Damián Nicanor Pérez Meyer]

Hi! yesterday I received a [bug] report asking Qt to not requiring apps using 
it to pass -fPIC (actually to let the app use -fPIE) due to hardening reasons.

Now as we are using -reduce-relocations and gcc5 this is currently not 
possible at least until gcc's upstreams decide to add this as a [feature].

Now I would like to know if someone can enlight me as to where are the 
drawbacks of both options: reducing rellocations and not enabling "hardening" 
or the contrary, not reducing rellocations and enabling hardening.

Of course I happily pointers to stuff to read, I'm just lost with this one.

[bug] <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796166>
[feature] <https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65886#c30>

Thanks in advance, Lisandro.

-- 

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.qt-project.org/pipermail/development/attachments/20150820/1b19ffdc/attachment.sig>