diff options
| author | Florian Weimer <fweimer@redhat.com> | 2017-03-02 14:44:28 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2017-03-02 14:44:28 +0100 |
| commit | 2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9 (patch) | |
| tree | 1106f82144a37c4e26b4f004208b6a76d460eedd /INSTALL | |
| parent | 9090848d0607e93fb08a1d68d9f263846ee33f02 (diff) | |
| download | glibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.zip glibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.tar.gz glibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.tar.bz2 | |
Document and fix --enable-bind-now [BZ #21015]
Diffstat (limited to 'INSTALL')
| -rw-r--r-- | INSTALL | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -146,6 +146,12 @@ will be used, and CFLAGS sets optimization options for the compiler. of routines called directly from assembler are excluded from this protection. +'--enable-bind-now' + Disable lazy binding for installed shared objects. This provides + additional security hardening because it enables full RELRO and a + read-only global offset table (GOT), at the cost of slightly + increased program load times. + '--enable-pt_chown' The file 'pt_chown' is a helper binary for 'grantpt' (*note Pseudo-Terminals: Allocation.) that is installed setuid root to fix |