← Back to context

Comment by bmicraft

3 years ago

> Linux distros disable security features like CFI

Why would they even do that?

I'm not sure, but I think CFI also requires building Chromium as a single binary with LTO, and this has extremely high memory requirements that their build infrastructure might not be able to handle. Also, I think some distros use GCC instead of LLVM/Clang, so CFI isn't even an option.