hardening-no-bindnow
This package provides an ELF binary that lacks the "bindnow" linker flag.
This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why).
If you use dpkg-buildflags
, you may have to add
hardening=+bindnow
or hardening=+all
to
DEB_BUILD_MAINT_OPTIONS
.
The relevant compiler flags are set in LDFLAGS
.
Severity: | info |
Experimental: | false |
See also
- list of all the affected packages
- the source of this tag