]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Enable full RELRO mode
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 3 Apr 2013 11:36:32 +0000 (12:36 +0100)
committerEric Blake <eblake@redhat.com>
Tue, 9 Apr 2013 19:55:20 +0000 (13:55 -0600)
commitd990d6aeb38095b68dae0c0633d00d7e6c81051e
treed5fd93451beda4e56da145b2f06b934cc8bb9a95
parentf015802380eab305b37116324e2be16d04a45860
Enable full RELRO mode

By passing the flags -z relro -z now to the linker, we can force
it to resolve all library symbols at startup, instead of on-demand.
This allows it to then make the global offset table (GOT) read-only,
which makes some security attacks harder.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
(cherry picked from commit fc8c1787d8b8eb6c462b8e5b49c2b3ccf3669bc0)
configure.ac
daemon/Makefile.am
m4/virt-linker-relro.m4 [new file with mode: 0644]
src/Makefile.am
tools/Makefile.am