Add recommendations for building linkers #623
Comments
|
+1, makes sense to me. Would you be willing to create a first draft pull request? |
|
Happily, will do. |
thesamesam
added a commit
to thesamesam/wg-best-practices-os-developers
that referenced
this issue
Sep 22, 2024
…nfiguration options Closes: ossf#623 Signed-off-by: Sam James <[email protected]>
thesamesam
added a commit
to thesamesam/wg-best-practices-os-developers
that referenced
this issue
Sep 22, 2024
…nfiguration options Add a section similar to "What should you do when compiling compilers?" but for linkers. LLVM doesn't accept new configure (CMake) options for default behaviour like this and instead asks distributors to use Clang configuration files, so this section is (currently) only for GNU Binutils. Per ossf#588, I've not included separate-code/rosegment, as we should handle that separately once there is consensus. Closes: ossf#623 Signed-off-by: Sam James <[email protected]>
thesamesam
added a commit
to thesamesam/wg-best-practices-os-developers
that referenced
this issue
Oct 4, 2024
…nfiguration options Add a section similar to "What should you do when compiling compilers?" but for linkers. LLVM doesn't accept new configure (CMake) options for default behaviour like this and instead asks distributors to use Clang configuration files, so this section is (currently) only for GNU Binutils. Per ossf#588, I've not included separate-code/rosegment, as we should handle that separately once there is consensus. Closes: ossf#623 Signed-off-by: Sam James <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We need a similar section to "What should you do when compiling compilers?" for linkers.
Noticed when looking at #622.
Some initial candidates for GNU Binutils:
--disable-default-execstack--enable-error-execstack--enable-relro--enable-secureplt(for ppc)--enable-textrel-check=error--enable-separate-code/--enable-rosegment(although do see Consider-Wl,-z,separate-codefor C and C++ Compiler Hardening Guide #588 (comment))The text was updated successfully, but these errors were encountered: