Page MenuHomePhabricator

[CMAKE] Add the linker flags to make the relocated sections read only
AbandonedPublic

Authored by Fabien on Wed, Mar 6, 15:20.

Details

Reviewers
deadalnix
Group Reviewers
Restricted Project
Summary

This is part of the binary hardening process.

Depends on D2657

Test Plan
make buildcmake && cd buildcmake
cmake -GNinja ..
ninja -v
../contrib/devtools/security-check.py src/bitcoind

Before the patch, the output of the security-check script would
contain 'RELRO`, no longer after the patch.

Diff Detail

Repository
rABC Bitcoin ABC
Branch
cmake_hardening_relro
Lint
Lint OK
Unit
No Unit Test Coverage
Build Status
Buildable 5202
Build 8467: Bitcoin ABC Teamcity Staging
Build 8466: arc lint + arc unit

Event Timeline

Fabien created this revision.Wed, Mar 6, 15:20
Herald added a reviewer: Restricted Project. · View Herald TranscriptWed, Mar 6, 15:20
Herald added a subscriber: schancel. · View Herald Transcript
Fabien planned changes to this revision.Fri, Mar 8, 12:55

Need an option to disable hardening

Fabien updated this revision to Diff 7672.Mon, Mar 11, 13:14

Rebase on top of D2674

Fabien planned changes to this revision.Wed, Mar 13, 14:52

Superseeded by D2687, can be removed when landed.

Fabien added a comment.Wed, Mar 20, 17:32

Superseeded by D2687

Fabien abandoned this revision.Wed, Mar 20, 17:32

Superseeded by D2687