Best way to make partial relro by default?

[Mike Frysinger]

On 28 Sep 2015 11:31, Pedro Giffuni wrote:
> I noticed many linux distributions are making partial RELRO the default:
> https://bugzilla.redhat.com/show_bug.cgi?id=807831
> 
> Some set it as the default in ld [1] some others set it in the gcc
> specs. What would be the "blessed" way to do this for all the
> distribution?

Gentoo has been doing this for about 9 years in the linker.  current:
https://sources.gentoo.org/gentoo/src/patchsets/binutils/2.25.1/78_all_use-relro.patch

> Any chance to see this standardized in the GNU toolchain, perhaps in ld?

i think a configure flag in ld/ and gold/ would be appropriate here
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://sourceware.org/pipermail/binutils/attachments/20150928/af6e6a5c/attachment.sig>