Project

General

Profile

Feature #1700

Updated by Victor Julien almost 9 years ago

Hello, 

 I compile the 3.0 version and wants to compile it with "-z relro -z now", but, even if 
 some options are in the Makefiles I didn't succeed. On my Debian the "hardening check" says 
 always : 
 <pre> 
 ------------------------------------------------------------------- 
  Position Independent Executable: yes 
  Stack protected: yes 
  Fortify Source functions: yes (some protected functions found) 
  Read-only relocations: no 
  Immediate binding: no 
 -------------------------------------------------------------------- 
 </pre> 
 I had to modify the Makefile in "src" adding : 
 -Wl,-z,relro -Wl,-z,now 
 at the end of the line : 
 SECCFLAGS = -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security  
 I get now : 
 <pre> 
 ------------------------------------------------------------------- 
  Position Independent Executable: yes 
  Stack protected: yes 
  Fortify Source functions: yes (some protected functions found) 
  Read-only relocations: yes 
  Immediate binding: yes 
 ------------------------------------------------------------------- 
 </pre> 

 Regards 

 JP P

Back