Przeglądaj źródła

dpkg-buildflags(1): clarify the relationship between relro/bindnow

Clarify the documentation about how bindnow will be forced off if relro
is not enabled or available.

Signed-off-by: Kees Cook <kees@debian.org>
Signed-off-by: Raphaël Hertzog <hertzog@debian.org>
Kees Cook 14 lat temu
rodzic
commit
5ee616c476
1 zmienionych plików z 3 dodań i 2 usunięć
  1. 3 2
      man/dpkg-buildflags.1

+ 3 - 2
man/dpkg-buildflags.1

@@ -231,7 +231,8 @@ This setting (enabled by default) adds
 to \fBLDFLAGS\fP.  During program load, several ELF memory sections need
 to \fBLDFLAGS\fP.  During program load, several ELF memory sections need
 to be written to by the linker. This flags the loader to turn these
 to be written to by the linker. This flags the loader to turn these
 sections read-only before turning over control to the program. Most
 sections read-only before turning over control to the program. Most
-notably this prevents GOT overwrite attacks.
+notably this prevents GOT overwrite attacks. If this option is disabled,
+\fBbindnow\fP will become disabled as well.
 .
 .
 .TP
 .TP
 .B bindnow
 .B bindnow
@@ -239,7 +240,7 @@ This setting (disabled by default) adds
 .B \-Wl,\-z,now
 .B \-Wl,\-z,now
 to \fBLDFLAGS\fP. During program load, all dynamic symbols are resolved,
 to \fBLDFLAGS\fP. During program load, all dynamic symbols are resolved,
 allowing for the entire PLT to be marked read-only (due to \fBrelro\fP
 allowing for the entire PLT to be marked read-only (due to \fBrelro\fP
-above).
+above). The option cannot become enabled if \fBrelro\fP is not enabled.
 .
 .
 .TP
 .TP
 .B pie
 .B pie