Re: Question about hardening build flags

2013-04-14 Thread Jérémie Courrèges-Anglas
Philip Guenther guent...@gmail.com writes: On Sat, Apr 13, 2013 at 8:17 AM, Jérémie Courrèges-Anglas j...@wxcvbn.org wrote: I'm trying to port mosh[1] on OpenBSD; its build system tries to enable several compile and build flags. Most of those seem on by default, where suitable, on OpenBSD

Re: Question about hardening build flags

2013-04-14 Thread Philip Guenther
On Sun, Apr 14, 2013 at 2:02 PM, Jérémie Courrèges-Anglas j...@wxcvbn.org wrote: Philip Guenther guent...@gmail.com writes: ... As for -z now: yeah, it works on OpenBSD; what problem are they trying to solve by using it? -z now seems to be useful when used together with -z relro, IIUC,

Re: Question about hardening build flags

2013-04-14 Thread Jérémie Courrèges-Anglas
Philip Guenther guent...@gmail.com writes: On Sun, Apr 14, 2013 at 2:02 PM, Jérémie Courrèges-Anglas j...@wxcvbn.org wrote: Philip Guenther guent...@gmail.com writes: ... As for -z now: yeah, it works on OpenBSD; what problem are they trying to solve by using it? -z now seems to be useful

Question about hardening build flags

2013-04-13 Thread Jérémie Courrèges-Anglas
Hi, I'm trying to port mosh[1] on OpenBSD; its build system tries to enable several compile and build flags. Most of those seem on by default, where suitable, on OpenBSD (SSP, PIE), but I wonder if ''ld -z relro'' and ''-z now'' would be useful. According to my limited testing, ''-z relro''

Re: Question about hardening build flags

2013-04-13 Thread Philip Guenther
On Sat, Apr 13, 2013 at 8:17 AM, Jérémie Courrèges-Anglas j...@wxcvbn.org wrote: I'm trying to port mosh[1] on OpenBSD; its build system tries to enable several compile and build flags. Most of those seem on by default, where suitable, on OpenBSD (SSP, PIE), but I wonder if ''ld -z relro''