Why does _hardened_build use "-z, relro" and not "-z, relro, -z, now" ?

Tomas Mraz tmraz at redhat.com
Fri Apr 12 20:03:55 UTC 2013


On Fri, 2013-04-12 at 11:02 -0400, Paul Wouters wrote: 
> On Thu, 11 Apr 2013, Björn Persson wrote:
> 
> > Paul Wouters wrote:
> >> Why does the _hardened_build macro for the spec file use "-z,relro" and not "-z,relro,-z,now" ?
> >
> > Huh? As far as I can see _hardened_build adds -z now, not relro.
> > -Wl,-z,relro is supposed to be included in LDFLAGS. Or has this changed
> > recently?
> 
> Let me rephrase... Why is _hardened_build not using "-z,relro,-z,now" ?

Because -Wl,-z,relro is supposed to be included in the default LDFLAGS
for all packages already.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb



More information about the devel mailing list