Commit d7270a5
committed
fix: update linker flags for enhanced security hardening
1. Modified GOBUILD_OPTIONS in debian/rules to include additional
security hardening flags
2. Changed from "-pie" only to "-Wl,-z,relro,-z,now,-pie" for
comprehensive security
3. This change applies to all architectures except mips64el
4. The new flags enable full RELRO (Relocation Read-Only) and BIND_NOW
for immediate binding
Log: Improved binary security with additional hardening flags
Influence:
1. Test that the package builds successfully on all supported
architectures except mips64el
2. Verify that the resulting binaries have proper security hardening
enabled
3. Check that the application functionality remains unchanged with the
new linker flags
4. Test on architectures where the change applies (non-mips64el) to
ensure no regressions
5. Verify that mips64el builds continue to use the original flags
without changes
fix: 更新链接器标志以增强安全加固
1. 修改 debian/rules 中的 GOBUILD_OPTIONS 以包含额外的安全加固标志
2. 从仅使用 "-pie" 改为 "-Wl,-z,relro,-z,now,-pie" 以实现全面的安全保护
3. 此更改适用于除 mips64el 之外的所有架构
4. 新标志启用完整的 RELRO(重定位只读)和 BIND_NOW 以实现立即绑定
Log: 通过额外的加固标志提高了二进制文件的安全性
Influence:
1. 测试软件包在除 mips64el 之外的所有支持架构上是否成功构建
2. 验证生成的二进制文件是否启用了适当的安全加固
3. 检查应用程序功能在使用新链接器标志后是否保持不变
4. 在应用更改的架构(非 mips64el)上进行测试,确保没有回归问题
5. 验证 mips64el 架构的构建是否继续使用原始标志而不受影响
PMS: BUG-3395711 parent b23fd7f commit d7270a5
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
| 11 | + | |
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
| |||
0 commit comments