https://github.com/gentoo/gentoo/blob/f406a34a23d17778d383c5cab0b86d86c32911db/sys-libs/pam/pam-1.5.3-r1.ebuild#L81 Given the recent toolchain enables -pie by default, I think it is not needed and it is not possible to get binaries without pie.