Build Go binaries with `-buildmode=pie"?
I was looking a bit how the obfs4proxy binary gets build for Android today and it turns out that Briar etc. use -buildmode=pie. Currently our Linux binaries have no PIE and no RELRO (but Stack Canaries, NX etc. enabled). Trying with -buildmode=pie results in "PIE enabled" but somewhat surprisingly our stack canaries are gone (but we get partial RELRO).
So, generally, should we start using PIE mode (and -extldflags=-pie where needed)? Or are we good with what we have?
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information