Author: idra Date: 2007-05-17 18:20:16 +0000 (Thu, 17 May 2007) New Revision: 22974
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=22974 Log: enable relro with PIE if available, this gives extra protection to the ELF segment Modified: branches/SAMBA_3_0/source/configure.in Changeset: Modified: branches/SAMBA_3_0/source/configure.in =================================================================== --- branches/SAMBA_3_0/source/configure.in 2007-05-17 13:56:19 UTC (rev 22973) +++ branches/SAMBA_3_0/source/configure.in 2007-05-17 18:20:16 UTC (rev 22974) @@ -1763,6 +1763,29 @@ fi fi +#Check if we can enable relro as well +if test x"${samba_cv_fpie}" = x"yes" +then + AC_CACHE_CHECK(for relro, samba_cv_fpie_relro, + [ + cat > conftest.c <<EOF +int foo; +main () { return 0;} +EOF + if AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS -pie -fPIE -Wl,z,relro -o conftest conftest.c 1>&AS_MESSAGE_LOG_FD]) + then + samba_cv_fpie_relro=yes + else + samba_cv_fpie_relro=no + fi + rm -f conftest* + ]) + if test x"${samba_cv_fpie_relro}" = x"yes" + then + PIE_LDFLAGS="-pie -Wl,z,relro" + fi +fi + # Assume non-shared by default and override below BLDSHARED="false"
