en Copyright 2025 Java http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#b2c76c41be32f904179efed29c0ca04d53f3996c Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 16 Aug 2023 17:55:15 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#c06e7b66a147edf55f4241fbfbfa32856550cd15 Merge ^/head r340126 through r340212. List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 07 Nov 2018 18:52:28 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#bf81eb3ca9758d6a45f5a92c0689fcad455827cd Add a WITH_BIND_NOW build knobThe linker's -z now flag sets the DF_BIND_NOW flag, which signals to theruntime loader that all relocation processing should be performed atprocess startup rather than on demand. In combination with lld'sdefault of enabling relro this causes the GOT to be made read-only whenthe process starts, preventing straightforward GOT overwrite attacks.Shawn Webb discovered a failure on HardenedBSD with BIND_NOW and ifuncuse, which resulted in my rtld fix in r340137. Add a BIND_NOW knob asit is trivial to do so and is a useful ELF hardening feature. Thischange is equivalent to HardenedBSD's but not identical as there areother diffs/conflicts nearby.Note that our ELF Tool Chain readelf does not currently decode theDF_BIND_NOW flag - see PR232983.Reviewed by: brooksMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D17846 List of files: /src/tools/build/options/WITHOUT_BIND_NOW Tue, 06 Nov 2018 15:52:49 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#b2c76c41be32f904179efed29c0ca04d53f3996c Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 16 Aug 2023 17:55:15 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#c06e7b66a147edf55f4241fbfbfa32856550cd15 Merge ^/head r340126 through r340212. List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 07 Nov 2018 18:52:28 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#bf81eb3ca9758d6a45f5a92c0689fcad455827cd Add a WITH_BIND_NOW build knobThe linker's -z now flag sets the DF_BIND_NOW flag, which signals to theruntime loader that all relocation processing should be performed atprocess startup rather than on demand. In combination with lld'sdefault of enabling relro this causes the GOT to be made read-only whenthe process starts, preventing straightforward GOT overwrite attacks.Shawn Webb discovered a failure on HardenedBSD with BIND_NOW and ifuncuse, which resulted in my rtld fix in r340137. Add a BIND_NOW knob asit is trivial to do so and is a useful ELF hardening feature. Thischange is equivalent to HardenedBSD's but not identical as there areother diffs/conflicts nearby.Note that our ELF Tool Chain readelf does not currently decode theDF_BIND_NOW flag - see PR232983.Reviewed by: brooksMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D17846 List of files: /src/tools/build/options/WITHOUT_BIND_NOW Tue, 06 Nov 2018 15:52:49 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#b2c76c41be32f904179efed29c0ca04d53f3996c Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 16 Aug 2023 17:55:15 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#c06e7b66a147edf55f4241fbfbfa32856550cd15 Merge ^/head r340126 through r340212. List of files: /src/tools/build/options/WITHOUT_BIND_NOW Wed, 07 Nov 2018 18:52:28 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/tools/build/options/WITHOUT_BIND_NOW#bf81eb3ca9758d6a45f5a92c0689fcad455827cd Add a WITH_BIND_NOW build knobThe linker's -z now flag sets the DF_BIND_NOW flag, which signals to theruntime loader that all relocation processing should be performed atprocess startup rather than on demand. In combination with lld'sdefault of enabling relro this causes the GOT to be made read-only whenthe process starts, preventing straightforward GOT overwrite attacks.Shawn Webb discovered a failure on HardenedBSD with BIND_NOW and ifuncuse, which resulted in my rtld fix in r340137. Add a BIND_NOW knob asit is trivial to do so and is a useful ELF hardening feature. Thischange is equivalent to HardenedBSD's but not identical as there areother diffs/conflicts nearby.Note that our ELF Tool Chain readelf does not currently decode theDF_BIND_NOW flag - see PR232983.Reviewed by: brooksMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D17846 List of files: /src/tools/build/options/WITHOUT_BIND_NOW Tue, 06 Nov 2018 15:52:49 +0000 Ed Maste <emaste@FreeBSD.org>