From 94a4e9e4f401ffe829a992820439977ead0a0ce7 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Thu, 25 Apr 2019 10:41:43 +0200 Subject: Extend BIND_NOW to installed programs with --enable-bind-now Commit 2d6ab5df3b675e96ee587ae6a8c2ce004c6b1ba9 ("Document and fix --enable-bind-now [BZ #21015]") extended BIND_NOW to all installed shared objects. This change also covers installed programs. Reviewed-by: Carlos O'Donell --- INSTALL | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'INSTALL') diff --git a/INSTALL b/INSTALL index ddb9e9018d..e137a71169 100644 --- a/INSTALL +++ b/INSTALL @@ -176,10 +176,10 @@ if 'CFLAGS' is specified it must enable optimization. For example: protection. '--enable-bind-now' - Disable lazy binding for installed shared objects. This provides - additional security hardening because it enables full RELRO and a - read-only global offset table (GOT), at the cost of slightly - increased program load times. + Disable lazy binding for installed shared objects and programs. + This provides additional security hardening because it enables full + RELRO and a read-only global offset table (GOT), at the cost of + slightly increased program load times. '--enable-pt_chown' The file 'pt_chown' is a helper binary for 'grantpt' (*note -- cgit 1.4.1