[tbb-bugs] #13031 [Tor Browser]: Provide full RELRO protection on Linux

[Tor Bug Tracker & Wiki]

#13031: Provide full RELRO protection on Linux
-----------------------------+--------------------------
     Reporter:  mikeperry    |      Owner:  tbb-team
         Type:  defect       |     Status:  needs_review
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-security
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------

Comment (by cypherpunks):

 > Okay, this works

 Does checksec reports full RELRO protection?

 > some random hardened-ld if we are already building our linker ourselves.

 Binutils and hardening wrappers are different packages. Wrapper passes
 need arguments to linker.
 Only option to change default sections generated by linker, like to
 generate BIND_NOW section by default too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13031#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online