[PATCH 3/3] toolchain: glibc: Enable --enable-bind-now

Hauke Mehrtens hauke at hauke-m.de
Wed Dec 29 09:40:37 PST 2021


Enable --enable-bind-now when CONFIG_PKG_RELRO_FULL is set. This option
is activated by default. This will enable full RELRO protection.

Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 toolchain/glibc/common.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/toolchain/glibc/common.mk b/toolchain/glibc/common.mk
index 16d9241dcae5..c239863a6c0a 100644
--- a/toolchain/glibc/common.mk
+++ b/toolchain/glibc/common.mk
@@ -63,6 +63,7 @@ GLIBC_CONFIGURE:= \
 		--$(if $(CONFIG_SOFT_FLOAT),without,with)-fp \
 		  $(if $(CONFIG_PKG_CC_STACKPROTECTOR_REGULAR),--enable-stack-protector=yes) \
 		  $(if $(CONFIG_PKG_CC_STACKPROTECTOR_STRONG),--enable-stack-protector=strong) \
+		  $(if $(CONFIG_PKG_RELRO_FULL),--enable-bind-now) \
 		--enable-kernel=5.4.0
 
 export libc_cv_ssp=no
-- 
2.30.2




More information about the openwrt-devel mailing list