gcc/lto-plugin
Marek Polacek 258d7149f9 configure: Implement --enable-host-bind-now
As promised in the --enable-host-pie patch, this patch adds another
configure option, --enable-host-bind-now, which adds -z now when linking
the compiler executables in order to extend hardening.  BIND_NOW with RELRO
allows the GOT to be marked RO; this prevents GOT modification attacks.

This option does not affect linking of target libraries; you can use
LDFLAGS_FOR_TARGET=-Wl,-z,relro,-z,now to enable RELRO/BIND_NOW.

c++tools/ChangeLog:

	* configure.ac (--enable-host-bind-now): New check.
	* configure: Regenerate.

gcc/ChangeLog:

	* configure.ac (--enable-host-bind-now): New check.  Add
	-Wl,-z,now to LD_PICFLAG if --enable-host-bind-now.
	* configure: Regenerate.
	* doc/install.texi: Document --enable-host-bind-now.

lto-plugin/ChangeLog:

	* configure.ac (--enable-host-bind-now): New check.  Link with
	-z,now.
	* configure: Regenerate.
2022-11-22 20:47:49 -05:00
..
aclocal.m4
ChangeLog Daily bump. 2022-10-13 00:17:37 +00:00
config.h.in lto-plugin: use locking only for selected targets 2022-07-07 15:18:58 +02:00
configure configure: Implement --enable-host-bind-now 2022-11-22 20:47:49 -05:00
configure.ac configure: Implement --enable-host-bind-now 2022-11-22 20:47:49 -05:00
lto-plugin.c lto-plugin: implement LDPT_GET_API_VERSION 2022-07-12 15:26:57 +02:00
lto-plugin.map lto-plugin: Use GNU ld or Solaris ld version script in preference to -export-symbols-regex [PR102426] 2022-03-22 11:03:54 +01:00
Makefile.am lto-plugin: use -pthread only for detected targets 2022-07-14 13:26:21 +02:00
Makefile.in lto-plugin: use -pthread only for detected targets 2022-07-14 13:26:21 +02:00