From 77df120bc8b220a79a8b158a457847d0d3d3c94b Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Tue, 28 Dec 2021 21:37:21 +0100 Subject: [PATCH] toolchain: glibc: Enable --enable-bind-now Enable --enable-bind-now when CONFIG_PKG_RELRO_FULL is set. This option is activated by default. This will enable full RELRO protection. Signed-off-by: Hauke Mehrtens --- toolchain/glibc/common.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/toolchain/glibc/common.mk b/toolchain/glibc/common.mk index 19610c1e90..e957ff52e5 100644 --- a/toolchain/glibc/common.mk +++ b/toolchain/glibc/common.mk @@ -63,6 +63,7 @@ GLIBC_CONFIGURE:= \ --$(if $(CONFIG_SOFT_FLOAT),without,with)-fp \ $(if $(CONFIG_PKG_CC_STACKPROTECTOR_REGULAR),--enable-stack-protector=yes) \ $(if $(CONFIG_PKG_CC_STACKPROTECTOR_STRONG),--enable-stack-protector=strong) \ + $(if $(CONFIG_PKG_RELRO_FULL),--enable-bind-now) \ --enable-kernel=5.4.0 export libc_cv_ssp=no