diff options
Diffstat (limited to 'documentation/ref-manual/ref-variables.xml')
-rw-r--r-- | documentation/ref-manual/ref-variables.xml | 26 |
1 files changed, 25 insertions, 1 deletions
diff --git a/documentation/ref-manual/ref-variables.xml b/documentation/ref-manual/ref-variables.xml index a79fc2ec87..631759d372 100644 --- a/documentation/ref-manual/ref-variables.xml +++ b/documentation/ref-manual/ref-variables.xml | |||
@@ -22,7 +22,7 @@ | |||
22 | <link linkend='var-D'>D</link> | 22 | <link linkend='var-D'>D</link> |
23 | <link linkend='var-EFI_PROVIDER'>E</link> | 23 | <link linkend='var-EFI_PROVIDER'>E</link> |
24 | <link linkend='var-FEATURE_PACKAGES'>F</link> | 24 | <link linkend='var-FEATURE_PACKAGES'>F</link> |
25 | <link linkend='var-GDB'>G</link> | 25 | <link linkend='var-GCCPIE'>G</link> |
26 | <link linkend='var-HOMEPAGE'>H</link> | 26 | <link linkend='var-HOMEPAGE'>H</link> |
27 | <link linkend='var-ICECC_DISABLED'>I</link> | 27 | <link linkend='var-ICECC_DISABLED'>I</link> |
28 | <!-- <link linkend='var-glossary-j'>J</link> --> | 28 | <!-- <link linkend='var-glossary-j'>J</link> --> |
@@ -5030,6 +5030,30 @@ | |||
5030 | 5030 | ||
5031 | <glossdiv id='var-glossary-g'><title>G</title> | 5031 | <glossdiv id='var-glossary-g'><title>G</title> |
5032 | 5032 | ||
5033 | <glossentry id='var-GCCPIE'><glossterm>GCCPIE</glossterm> | ||
5034 | <info> | ||
5035 | GCCPIE[doc] = "Enables Position Independent Executables (PIE) within the GNU C Compiler (GCC)." | ||
5036 | </info> | ||
5037 | <glossdef> | ||
5038 | <para role="glossdeffirst"> | ||
5039 | <!-- <para role="glossdeffirst"><imagedata fileref="figures/define-generic.png" /> --> | ||
5040 | Enables Position Independent Executables (PIE) within the | ||
5041 | GNU C Compiler (GCC). | ||
5042 | Enabling PIE in the GCC makes Return Oriented Programming | ||
5043 | (ROP) attacks much more difficult to | ||
5044 | execute. | ||
5045 | </para> | ||
5046 | |||
5047 | <para> | ||
5048 | By default the <filename>security_flags.inc</filename> | ||
5049 | file enables PIE by setting the variable as follows: | ||
5050 | <literallayout class='monospaced'> | ||
5051 | GCCPIE ?= "--enable-default-pie" | ||
5052 | </literallayout> | ||
5053 | </para> | ||
5054 | </glossdef> | ||
5055 | </glossentry> | ||
5056 | |||
5033 | <glossentry id='var-GDB'><glossterm>GDB</glossterm> | 5057 | <glossentry id='var-GDB'><glossterm>GDB</glossterm> |
5034 | <info> | 5058 | <info> |
5035 | GDB[doc] = "The minimal command and arguments to run the GNU Debugger." | 5059 | GDB[doc] = "The minimal command and arguments to run the GNU Debugger." |