diff options
| author | Florian Weimer <fweimer@redhat.com> | 2019-05-09 14:37:41 +0200 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2019-05-13 20:22:23 +0300 |
| commit | b406f28746e747ee7d739970a00e3aa0963b3e88 (patch) | |
| tree | dde274dd827996540fa3cb4401f08a4a493c084f /acinclude.m4 | |
| parent | 3597960595b028b897a7fe97605135ce5040fca5 (diff) | |
| download | bluez-b406f28746e747ee7d739970a00e3aa0963b3e88.tar.gz | |
build: Enable BIND_NOW
Partial RELRO means that the object is GNU_RELRO but not BIND_NOW. This
reduces the effectiveness of RELRO. bluez triggers this because it
enables PIE during the build, and rpmdiff takes this as an indicator
that the best possible hardening is desired.
https://bugzilla.redhat.com/show_bug.cgi?id=983161
Diffstat (limited to 'acinclude.m4')
| -rw-r--r-- | acinclude.m4 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/acinclude.m4 b/acinclude.m4 index 045138c04..529848357 100644 --- a/acinclude.m4 +++ b/acinclude.m4 @@ -50,7 +50,7 @@ AC_DEFUN([MISC_FLAGS], [ if (test "${enableval}" = "yes" && test "${ac_cv_prog_cc_pie}" = "yes"); then misc_cflags="$misc_cflags -fPIC" - misc_ldflags="$misc_ldflags -pie" + misc_ldflags="$misc_ldflags -pie -Wl,-z,now" fi ]) if (test "$enable_coverage" = "yes"); then |