mirror of
https://github.com/opnsense/src.git
synced 2026-04-15 14:29:58 -04:00
Note that lld enables relro by default, so that we already had either partial or full RELRO, depending on the state of the BIND_NOW knob. Add a RELRO knob so that the option can be disabled if desired, and so that builds using the GNU toolchain are equivalent to those using the standard Clang/LLVM toolchain. Reviewed by: markj MFC after: 3 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D35545
5 lines
125 B
Text
5 lines
125 B
Text
Build all binaries with the Relocation Read-Only (RELRO) vulnerability
|
|
mitigation applied.
|
|
See also the
|
|
.Va BIND_NOW
|
|
option.
|