Re: RFC: Audit external function called indirectly via GOT

[Cary Coutant <ccoutant@gmail.com>]

>> I want to use both so that GOT is read-only after relocation in
>> normal case and the writable PLTGOT is only used for LD_AUDIT.
>
> But if the program isn't linked with relro, the PLTGOT entries remain
> writable and you have no need for both. If it's linked with immediate
> binding and relro, the PLTGOT entries become relro, and again you have
> no need for both. The only case where you can make an argument for
> both is when the program is linked with both relro and lazy binding.
> But I don't see why you need the additional security if you're not
> bothering to link with immediate binding.

Sorry, I meant to write "... if the program isn't linked with relro,
the *GOT* entries remain writable ...."

-cary