diff options
| author | Marek Polacek <polacek@redhat.com> | 2022-11-22 20:46:46 -0500 |
|---|---|---|
| committer | Marek Polacek <polacek@redhat.com> | 2022-11-22 20:47:49 -0500 |
| commit | 258d7149f92f19380c9f7763618d62408c064e60 (patch) | |
| tree | 9549da576a7db4013d5352370daa4d3ab39269f4 /symlink-tree | |
| parent | 251c72a68af3a8b0638705b73ef120ffdf0053eb (diff) | |
| download | gcc-258d7149f92f19380c9f7763618d62408c064e60.zip gcc-258d7149f92f19380c9f7763618d62408c064e60.tar.gz gcc-258d7149f92f19380c9f7763618d62408c064e60.tar.bz2 | |
configure: Implement --enable-host-bind-now
As promised in the --enable-host-pie patch, this patch adds another
configure option, --enable-host-bind-now, which adds -z now when linking
the compiler executables in order to extend hardening. BIND_NOW with RELRO
allows the GOT to be marked RO; this prevents GOT modification attacks.
This option does not affect linking of target libraries; you can use
LDFLAGS_FOR_TARGET=-Wl,-z,relro,-z,now to enable RELRO/BIND_NOW.
c++tools/ChangeLog:
* configure.ac (--enable-host-bind-now): New check.
* configure: Regenerate.
gcc/ChangeLog:
* configure.ac (--enable-host-bind-now): New check. Add
-Wl,-z,now to LD_PICFLAG if --enable-host-bind-now.
* configure: Regenerate.
* doc/install.texi: Document --enable-host-bind-now.
lto-plugin/ChangeLog:
* configure.ac (--enable-host-bind-now): New check. Link with
-z,now.
* configure: Regenerate.
Diffstat (limited to 'symlink-tree')
0 files changed, 0 insertions, 0 deletions