]> xenbits.xensource.com Git - people/liuw/libxenctrl-split/libvirt.git/commit
projects / people / liuw / libxenctrl-split / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1150999) | patch
Enable full RELRO mode
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 3 Apr 2013 11:36:32 +0000 (12:36 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Wed, 3 Apr 2013 15:19:35 +0000 (16:19 +0100)
commitfc8c1787d8b8eb6c462b8e5b49c2b3ccf3669bc0
tree1782caba648e13839ec61564841f228c1dfd5aedtree
parent1150999ca444d8cb1d906a4948b808125fa209b7commit | diff
Enable full RELRO mode

By passing the flags -z relro -z now to the linker, we can force
it to resolve all library symbols at startup, instead of on-demand.
This allows it to then make the global offset table (GOT) read-only,
which makes some security attacks harder.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
configure.ac diff | blob | blame | history
daemon/Makefile.am diff | blob | blame | history
m4/virt-linker-relro.m4 [new file with mode: 0644] blob
src/Makefile.am diff | blob | blame | history
tools/Makefile.am diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.