36 lines
1.1 KiB
Diff
36 lines
1.1 KiB
Diff
From f19f943a6699d771ef85402998a56743d6dfa3d9 Mon Sep 17 00:00:00 2001
|
|
From: Emmanuele Bassi <ebassi@gnome.org>
|
|
Date: Fri, 3 Mar 2017 16:58:46 +0000
|
|
Subject: [PATCH 2/6] Add z,relro and z,now to the GCC linker flags
|
|
|
|
These flags are mitigations against memory corruption bugs, and are
|
|
typically enabled by Linux distributions hardening rules.
|
|
|
|
We only use these flags with GCC, similarly to `-Bsymbolic`.
|
|
|
|
More information on relro is available here:
|
|
|
|
- http://tk-blog.blogspot.co.uk/2009/02/relro-not-so-well-known-memory.html
|
|
- http://mudongliang.github.io/2016/07/11/relro-a-not-so-well-known-memory-corruption-mitigation-technique.html
|
|
- https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_RELRO_.28ld_-z_relro.29
|
|
---
|
|
src/meson.build | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/meson.build b/src/meson.build
|
|
index 3610af3..ecd032a 100644
|
|
--- a/src/meson.build
|
|
+++ b/src/meson.build
|
|
@@ -52,7 +52,7 @@ foreach h: headers
|
|
endforeach
|
|
|
|
if cc.get_id() == 'gcc'
|
|
- common_ldflags = [ '-Wl,-Bsymbolic', ]
|
|
+ common_ldflags = [ '-Wl,-Bsymbolic', '-Wl,-z,relro', '-Wl,-z,now', ]
|
|
else
|
|
common_ldflags = []
|
|
endif
|
|
--
|
|
2.12.0
|
|
|