Why does _hardened_build use "-z, relro" and not "-z, relro, -z, now" ?

Paul Wouters paul at nohats.ca
Mon Apr 15 04:13:30 UTC 2013


On Fri, 12 Apr 2013, Tomas Mraz wrote:

>>> Huh? As far as I can see _hardened_build adds -z now, not relro.
>>> -Wl,-z,relro is supposed to be included in LDFLAGS. Or has this changed
>>> recently?
>>
>> Let me rephrase... Why is _hardened_build not using "-z,relro,-z,now" ?
>
> Because -Wl,-z,relro is supposed to be included in the default LDFLAGS
> for all packages already.

Ahh, I see. Some of my packages lost that due to non-default handling
of those options.

It all makes sense now, thanks.

Paul


More information about the devel mailing list