[arch-dev-public] RFC: go-pie removal in favour of GOFLAGS

Levente Polyak anthraxx at archlinux.org
Thu May 14 07:39:58 UTC 2020


On 5/13/20 10:16 PM, Morten Linderud via arch-dev-public wrote:
> 
> If there are no objections, I'll probably merge the guidelines this weekend
> section-by-section to make the wiki admins happy. The new package should land
> sometime nextweek.
> 

Awesome, thanks a lot this is a great step to improve the security of Go
applications on a binary level.


> At the end of the month I'll make a todo with the remaining packages depending
> on `go-pie`.
> 
> The complete future Go PKGBUILD is attached to this email below.
> 
PS: shouldn't we look into Go getting those flags as well? The Go
compiler itself doesn't have RELRO and fortified sources :)

cheers,
Levente

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-dev-public/attachments/20200514/17ec00f2/attachment.sig>


More information about the arch-dev-public mailing list