Re: Additional linking hardening

> Hi Jacob,
>=20
> On Sun, Dec 27, 2009 at 16:19:35 +0100, Jacob Appelbaum wrote:
>=20
>> +# To prevent some kinds of exploitation at run time, fix up the progr=
am's
>> +# got table to be read only (also reorders structures) after the firs=
t program
>> +# load. eg: ld -z relro -z now
>> +LDFLAGS +=3D -z relro -z now
>> +
>=20
> I think you want
> LDFLAGS +=3D -Wl,-z,relro -Wl,-z,now

That looks about right.

>=20
> LDFLAGS are passed to the compiler, not directly to ld.

Ah sure, of course.

>=20
> How portable to non-gnu ld are these flags?

I am unsure. A good question. What other build environments should I
test with?

Best,
Jacob

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev

_______________________________________________
Polipo-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/polipo-users

-----BEGIN PGP SIGNATURE-----

iD8DBQFLOgE9uIQakZ0PrOQRCq7SAKCFxA1+cY2fhf3ZcbIUXpyamR+dFQCffOw2
+ht0i+Ddf5kR+emF/TYWcNQ=
=Yf1+
-----END PGP SIGNATURE-----