Re: Additional linking hardening
Julien Cristau <[email protected]>
| Newsgroups | gmane.comp.web.polipo.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Jacob, On Sun, Dec 27, 2009 at 16:19:35 +0100, Jacob Appelbaum wrote: > +# To prevent some kinds of exploitation at run time, fix up the program's > +# got table to be read only (also reorders structures) after the first program > +# load. eg: ld -z relro -z now > +LDFLAGS += -z relro -z now > + I think you want LDFLAGS += -Wl,-z,relro -Wl,-z,now LDFLAGS are passed to the compiler, not directly to ld. How portable to non-gnu ld are these flags? Cheers, Julien ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev