[libvirt] [PATCH 2/2] Enable full RELRO mode
Eric Blake
eblake at redhat.com
Wed Apr 3 13:09:11 UTC 2013
On 04/03/2013 05:41 AM, Daniel P. Berrange wrote:
> From: "Daniel P. Berrange" <berrange at redhat.com>
>
> By passing the flags -z relro -z now to the linker, we can force
> it to resolve all library symbols at startup, instead of on-demand.
> This allows it to then make the global offset table (GOT) read-only,
> which makes some security attacks harder.
>
> Signed-off-by: Daniel P. Berrange <berrange at redhat.com>
> ---
> configure.ac | 1 +
> daemon/Makefile.am | 1 +
> m4/virt-linker-relro.m4 | 15 +++++++++++++++
> src/Makefile.am | 43 +++++++++++++++++++++++++++++++------------
> tools/Makefile.am | 2 ++
> 5 files changed, 50 insertions(+), 12 deletions(-)
> create mode 100644 m4/virt-linker-relro.m4
>
> +++ b/m4/virt-linker-relro.m4
> @@ -0,0 +1,15 @@
> +dnl
> +dnl Check for -z now and -z relro linker flags
Same comment about copyright blurb.
ACK.
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 621 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20130403/58f92c8e/attachment-0001.sig>
More information about the libvir-list
mailing list