Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 4 Nov 2011 04:46:21 +0400
From: Solar Designer <solar@...nwall.com>
To: owl-dev@...ts.openwall.com
Subject: Re: %optflags for new gcc

On Fri, Nov 04, 2011 at 04:37:31AM +0400, Solar Designer wrote:
> 3. -Wl,-z,relro
> 
> I am doing a test build now, no problems so far.

This has worked, but some of the resulting binaries are not RELRO, which
is caused by %optflags not always being used during linking.  This is an
instance of the same problem seen with -fstack-protector, except that
here instead of a failed build we get no protection.

In general, do we want to use %optflags universally - that is, mix both
compiler and linker flags in it - or separate it into two somehow?
(Or into four, considering our separation for bin vs. lib.)

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ