Feature #1700
Updated by Victor Julien about 8 years ago
Hello, I compile the 3.0 version and wants to compile it with "-z relro -z now", but, even if some options are in the Makefiles I didn't succeed. On my Debian the "hardening check" says always : <pre> ------------------------------------------------------------------- Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: no Immediate binding: no -------------------------------------------------------------------- </pre> I had to modify the Makefile in "src" adding : -Wl,-z,relro -Wl,-z,now at the end of the line : SECCFLAGS = -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security I get now : <pre> ------------------------------------------------------------------- Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: yes Immediate binding: yes ------------------------------------------------------------------- </pre> Regards JP P