aboutsummaryrefslogtreecommitdiff
path: root/INSTALL
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2017-03-02 14:44:28 +0100
committerFlorian Weimer <fweimer@redhat.com>2017-03-02 14:44:28 +0100
commit2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9 (patch)
tree1106f82144a37c4e26b4f004208b6a76d460eedd /INSTALL
parent9090848d0607e93fb08a1d68d9f263846ee33f02 (diff)
downloadglibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.zip
glibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.tar.gz
glibc-2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9.tar.bz2
Document and fix --enable-bind-now [BZ #21015]
Diffstat (limited to 'INSTALL')
-rw-r--r--INSTALL6
1 files changed, 6 insertions, 0 deletions
diff --git a/INSTALL b/INSTALL
index 3b3fd12..e77cb2d 100644
--- a/INSTALL
+++ b/INSTALL
@@ -146,6 +146,12 @@ will be used, and CFLAGS sets optimization options for the compiler.
of routines called directly from assembler are excluded from this
protection.
+'--enable-bind-now'
+ Disable lazy binding for installed shared objects. This provides
+ additional security hardening because it enables full RELRO and a
+ read-only global offset table (GOT), at the cost of slightly
+ increased program load times.
+
'--enable-pt_chown'
The file 'pt_chown' is a helper binary for 'grantpt' (*note
Pseudo-Terminals: Allocation.) that is installed setuid root to fix