Additional linking hardening

Jacob Appelbaum <[email protected]>
Newsgroups gmane.comp.web.polipo.user
Message-ID <[email protected]>
Hi Chris,

I wanted to send along another hardening patch for linking.

Best,
Jake

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev

_______________________________________________
Polipo-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/polipo-users
polipo-ld-flag-hardening.patch (text/x-patch, 516 B)
diff --git a/Makefile b/Makefile
index 78c31ab..e6fd085 100644
--- a/Makefile
+++ b/Makefile
@@ -26,6 +26,11 @@ CDEBUGFLAGS = -Os -g -Wall
 # CDEBUGFLAGS += -D_FORTIFY_SOURCE=2 -fstack-protector-all \
 #                -Wstack-protector -fwrapv
 
+# To prevent some kinds of exploitation at run time, fix up the program's
+# got table to be read only (also reorders structures) after the first program
+# load. eg: ld -z relro -z now
+LDFLAGS += -z relro -z now
+
 # To compile on a pure POSIX system:
 
 # CC = c89
signature.asc (application/pgp-signature, 155 B)
-----BEGIN PGP SIGNATURE-----

iD8DBQFLN3sJuIQakZ0PrOQRCgylAJ9pvraRgyRHRqgeGOqsymGdGPCmYwCeMWVC
0RjufzXVCVRun78FMmE+dw8=
=TwHs
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.