Re: Question about hardening build flags

2013-04-14 Thread Jérémie Courrèges-Anglas
Philip Guenther writes: > On Sun, Apr 14, 2013 at 2:02 PM, Jérémie Courrèges-Anglas > wrote: >> Philip Guenther writes: > ... >>> As for -z now: yeah, it works on OpenBSD; what problem are they trying >>> to solve by using it? >> >> -z now seems to be useful when used together with -z relro, II

Re: Question about hardening build flags

2013-04-14 Thread Philip Guenther
On Sun, Apr 14, 2013 at 2:02 PM, Jérémie Courrèges-Anglas wrote: > Philip Guenther writes: ... >> As for -z now: yeah, it works on OpenBSD; what problem are they trying >> to solve by using it? > > -z now seems to be useful when used together with -z relro, IIUC, > allowing the global offset tabl

Re: Question about hardening build flags

2013-04-14 Thread Jérémie Courrèges-Anglas
Philip Guenther writes: > On Sat, Apr 13, 2013 at 8:17 AM, Jérémie Courrèges-Anglas > wrote: >> I'm trying to port mosh[1] on OpenBSD; its build system tries to enable >> several compile and build flags. Most of those seem on by default, where >> suitable, on OpenBSD (SSP, PIE), but I wonder if

Re: Question about hardening build flags

2013-04-13 Thread Philip Guenther
On Sat, Apr 13, 2013 at 8:17 AM, Jérémie Courrèges-Anglas wrote: > I'm trying to port mosh[1] on OpenBSD; its build system tries to enable > several compile and build flags. Most of those seem on by default, where > suitable, on OpenBSD (SSP, PIE), but I wonder if ''ld -z relro'' > and ''-z now''

Question about hardening build flags

2013-04-13 Thread Jérémie Courrèges-Anglas
Hi, I'm trying to port mosh[1] on OpenBSD; its build system tries to enable several compile and build flags. Most of those seem on by default, where suitable, on OpenBSD (SSP, PIE), but I wonder if ''ld -z relro'' and ''-z now'' would be useful. According to my limited testing, ''-z relro'' does