Daemons really should be built as PIE where possible, by passing -fpie -pie compile flags. lsexec shows mDNSResponder and nifd aren't built this way yet.
howl is no longer part of any product.