I grepped the amd64 bulk build logs for ports that appear to build something with -static but without -pie:
benchmarks/bytebench cad/ngspice devel/lpc21isp games/sudoku-solver mail/femail mail/mini_sendmail net/icinga/core net/nagios/nagios net/nagios/nagios,chroot security/aide security/chntpw security/cryptcat security/integrit security/shash,static security/tempwatch shells/sash sysutils/memtest86+ www/fcgi-cgi Maybe there's the odd one that really can't use PIE, but generally I suspect they should build with -static -pie on those archs that support it, i.e., they should use "${STATIC}" (ultimately from bsd.own.mk) instead of "-static". -- Christian "naddy" Weisgerber na...@mips.inka.de