On 02/24/2018 07:13 PM, Philip Kovacs wrote:
A scratch build won't find bind now errors as they are discovered at run time when the dlopen occurs.
I have been using:%define _hardened_ldflags "-Wl,-z,lazy"to allow the compile-time hardening, stack protection, etc to remain but filter out the -z now linker flag.I assume this won't work anymore.
It will keep working because the -Wl,-z,now goes into %_hardened_ldflags.
In the future, you should not override %_hardened_ldflags, but rather
put -Wl,-z,lazy at the end of LDFLAGS. This way, you will not disable
PIE linking. I expect this to work only after the second stage of the
-z now switch (the first stage leaves the flag in the GCC specs file,
where it will interact in unpredictable ways with -z lazy).
Thanks,
Florian
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
