Re: Additional linking hardening
Christopher Davis <[email protected]>
| Newsgroups | gmane.comp.web.polipo.user |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Dec 29, 2009 at 02:16:39PM +0100, Jacob Appelbaum wrote: > >=20 > > On Sun, Dec 27, 2009 at 16:19:35 +0100, Jacob Appelbaum wrote: > >=20 > >> +# To prevent some kinds of exploitation at run time, fix up the progr= > am's > >> +# got table to be read only (also reorders structures) after the firs= > t program > >> +# load. eg: ld -z relro -z now > >> +LDFLAGS +=3D -z relro -z now > >> + > >=20 > > I think you want > > LDFLAGS +=3D -Wl,-z,relro -Wl,-z,now > > That looks about right. > > >=20 > > LDFLAGS are passed to the compiler, not directly to ld. > > Ah sure, of course. > > >=20 > > How portable to non-gnu ld are these flags? > > I am unsure. A good question. What other build environments should I > test with? > Mac OS X is the most notable platform I can think of that doesn't use GNU ld (although it does use gcc). -- Christopher Davis Mangrin Remailer Admin PGP: 0x0F8DA163 ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev