Consider applying `-Wl,-z,relro` or `-Wl,-z,relro,-z,now` by default

[brson]

These are some options that Debian applies, and that @gus wants to apply to all Rust code. Generally, Rust likes to harden things by default when there are no obvious disadvantages. Is it feasible that we might just use these by default?

[gus]

Sounds cool, but I didn't ask for that, @brson :)

Cheers,
Gus

[brson]

Oops, wrong @gus. Sorry! Strong beard though.

[gus]

;)

On Mon, Nov 16, 2015, 20:55 Brian Anderson notifications@github.com wrote:

Oops, wrong @gus https://github.com/gus. Sorry! Strong beard though.

—
Reply to this email directly or view it on GitHub
#29877 (comment).

[genodeftest]

There is something similiar on Fedora: Change: Harden all packages

[nagisa]

Downside is that not every alternative linker out there might support the flags.

[brson]

@alexcrichton do recall if we've done anything here? I don't see 'relro' in the source.

[alexcrichton]

No I don't believe we ever implemented this, but would be good to do so!

[alexcrichton]

er didn't mean to close

[cuviper]

FWIW, I also apply -Clink-arg=-Wl,-z,relro,-z,now in Fedora.