Beta Branch enable NGINXCOMPILE_PIE='y' by default in 130.00beta01

enable NGINXCOMPILE_PIE='y' by default in 130.00beta01

- Enable NGINXCOMPILE_PIE='y' by default for Nginx compiled binary builds to be compiled with Position Independent-Code (PIC). This previously was an optional flag that you could enable.
- Position-Independent Code (PIC) is a type of machine code that executes properly regardless of where in memory it resides. This is in contrast to non-PIC code, which might be dependent on being loaded at a specific memory address. Since PIC can run at any memory address, it's easier to employ techniques like Address Space Layout Randomization (ASLR), which loads program components in random locations in memory to thwart certain types of attacks.
- When using shared libraries (code that is shared among different programs), PIC helps because the shared code can be loaded at any address in each program's memory space, without needing multiple copies of the same code at different addresses
- Existing Centmin Mod users can run cmupdate command to update local code, then run centmin.sh menu option 4 to recompile/update Nginx version to be build with NGINXCOMPILE_PIE='y'

Continue reading...

---

130.00beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/130.00beta01
• Commit History: https://github.com/centminmod/centminmod/commits/130.00beta01

Support Centmin Mod

If you find Centmin Mod useful, please help support Centmin Mod