Add -buildmode=pie for supported platform

dev-tools/mage/build.go

@@ -62,9 +62,38 @@ func DefaultBuildArgs() BuildArgs {
 	if versionQualified {
 		args.Vars[elasticBeatsModulePath+"/libbeat/version.qualifier"] = "{{ .Qualifier }}"
 	}
+
+	if positionIndependendCodeSupported() {
+		args.ExtraFlags = append(args.ExtraFlags, "-buildmode", "pie")
+	}
+
 	return args
 }
 
+// positionIndependendCodeSupported checks if the target platform support position independen code (or ASLR).
+//
+// The list of supported platforms is compiled based on the Go release notes: https://golang.org/doc/devel/release.html
+// The list has been updated according to the Go version: 1.16
+func positionIndependendCodeSupported() bool {
+	return oneOf(Platform.GOOS, "darwin") ||
+		(Platform.GOOS == "linux" && oneOf(Platform.GOARCH, "riscv64", "amd64", "arm", "arm64", "ppc64le", "386")) ||
+		(Platform.GOOS == "aix" && Platform.GOARCH == "ppc64") ||
+
+		// Windows 32bit supports ASLR, but Windows Server 2003 and earlier do not.
+		// According to the support matrix (https://www.elastic.co/support/matrix), these old versions
+		// are not supported.
+		(Platform.GOOS == "windows")
+}
+
+func oneOf(value string, lst ...string) bool {
+	for _, other := range lst {
+		if other == value {
+			return true
+		}
+	}
+	return false
+}
+
 // DefaultGolangCrossBuildArgs returns the default BuildArgs for use in
 // cross-builds.
 func DefaultGolangCrossBuildArgs() BuildArgs {