Blame add-relro-linker-option.patch
|
Elio Maldonado |
2a8c131 |
diff -up nss/coreconf/Linux.mk.relro nss/coreconf/Linux.mk
|
|
Elio Maldonado |
2a8c131 |
--- nss/coreconf/Linux.mk.relro 2013-04-09 14:29:45.943228682 -0700
|
|
Elio Maldonado |
2a8c131 |
+++ nss/coreconf/Linux.mk 2013-04-09 14:31:26.194953927 -0700
|
|
Elio Maldonado |
2a8c131 |
@@ -174,6 +174,12 @@ endif
|
|
Elio Maldonado |
4106427 |
endif
|
|
Elio Maldonado |
4106427 |
endif
|
|
Elio Maldonado |
4106427 |
|
|
Elio Maldonado |
4106427 |
+# harden DSOs/executables a bit against exploits
|
|
Elio Maldonado |
4106427 |
+ifeq (2.6,$(firstword $(sort 2.6 $(OS_RELEASE))))
|
|
Elio Maldonado |
4106427 |
+DSO_LDOPTS+=-Wl,-z,relro
|
|
Elio Maldonado |
4106427 |
+LDFLAGS += -Wl,-z,relro
|
|
Elio Maldonado |
4106427 |
+endif
|
|
Elio Maldonado |
4106427 |
+
|
|
Elio Maldonado |
4106427 |
USE_SYSTEM_ZLIB = 1
|
|
Elio Maldonado |
4106427 |
ZLIB_LIBS = -lz
|
|
Elio Maldonado |
4106427 |
|