Additional linking hardening
Jacob Appelbaum <[email protected]>
| Newsgroups | gmane.comp.web.polipo.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Chris, I wanted to send along another hardening patch for linking. Best, Jake ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Polipo-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/polipo-users
polipo-ld-flag-hardening.patch
(text/x-patch, 516 B)
diff --git a/Makefile b/Makefile index 78c31ab..e6fd085 100644 --- a/Makefile +++ b/Makefile @@ -26,6 +26,11 @@ CDEBUGFLAGS = -Os -g -Wall # CDEBUGFLAGS += -D_FORTIFY_SOURCE=2 -fstack-protector-all \ # -Wstack-protector -fwrapv +# To prevent some kinds of exploitation at run time, fix up the program's +# got table to be read only (also reorders structures) after the first program +# load. eg: ld -z relro -z now +LDFLAGS += -z relro -z now + # To compile on a pure POSIX system: # CC = c89
signature.asc
(application/pgp-signature, 155 B)
-----BEGIN PGP SIGNATURE----- iD8DBQFLN3sJuIQakZ0PrOQRCgylAJ9pvraRgyRHRqgeGOqsymGdGPCmYwCeMWVC 0RjufzXVCVRun78FMmE+dw8= =TwHs -----END PGP SIGNATURE-----