From c774d9a3f35c312d5b24c4ba13da707ccd975194 Mon Sep 17 00:00:00 2001 From: Peter Rajnoha Date: Thu, 4 Sep 2014 10:52:41 +0200 Subject: [PATCH] so: make sure shared libs are built with RELRO option In addition to using RELRO for daemons, use this option for shared libraries. See also commit a65ab773b4ddb06e87d678d3b2f4d0ca3e5b9fd0. --- WHATS_NEW | 1 + make.tmpl.in | 1 + 2 files changed, 2 insertions(+) diff --git a/WHATS_NEW b/WHATS_NEW index 70df45021..bf929f606 100644 --- a/WHATS_NEW +++ b/WHATS_NEW @@ -1,5 +1,6 @@ Version 2.02.112 - ===================================== + Make sure shared libraries are built with RELRO option. Version 2.02.111 - 1st September 2014 ===================================== diff --git a/make.tmpl.in b/make.tmpl.in index 5e597df11..455e9c2bf 100644 --- a/make.tmpl.in +++ b/make.tmpl.in @@ -160,6 +160,7 @@ ifeq ("@HAVE_PIE@", "yes") ifeq ("@HAVE_FULL_RELRO@", "yes") EXTRA_EXEC_CFLAGS += -fPIE -DPIE EXTRA_EXEC_LDFLAGS += -Wl,-z,relro,-z,now -pie + CLDFLAGS += -Wl,-z,relro endif endif endif