From 94a4e9e4f401ffe829a992820439977ead0a0ce7 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Thu, 25 Apr 2019 10:41:43 +0200 Subject: Extend BIND_NOW to installed programs with --enable-bind-now Commit 2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9 ("Document and fix --enable-bind-now [BZ #21015]") extended BIND_NOW to all installed shared objects. This change also covers installed programs. Reviewed-by: Carlos O'Donell --- manual/install.texi | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'manual') diff --git a/manual/install.texi b/manual/install.texi index a9b8b49..29f6b68 100644 --- a/manual/install.texi +++ b/manual/install.texi @@ -204,10 +204,10 @@ number of routines called directly from assembler are excluded from this protection. @item --enable-bind-now -Disable lazy binding for installed shared objects. This provides -additional security hardening because it enables full RELRO and a -read-only global offset table (GOT), at the cost of slightly increased -program load times. +Disable lazy binding for installed shared objects and programs. This +provides additional security hardening because it enables full RELRO +and a read-only global offset table (GOT), at the cost of slightly +increased program load times. @pindex pt_chown @findex grantpt -- cgit v1.1