Hardening binary & shared library

[grawlinson]

I'm one of the package maintainers for Arch Linux and I also maintain a few packages on the AUR, which mergestat can be found on.

Just wondering if there's any interest in RELRO/PIE being applied to the binary & shared library?

I generally try and apply these to all the Go-related packages that I maintain due to our Go package guidelines. I've found that mergestat seems to be working fine with these applied, as per this commit.

[patrickdevivo]

Hi @grawlinson thanks for reaching out! Yes - we do have interest in applying RELRO/PIE to the binary and shared library, thank you for sharing the background for those as well. It looks like line 57 in the linked commit there is the key bit? I will look into adding those flags to our Makefile and open a PR shortly

[grawlinson]

There’s a few parameters that need to be added to LDFLAGS, I’ll have a look at them and get back to you.