RELRO security in Snort-2.9.x

[Bill Parker <wp02855 () gmail com>]

Hi All,

   Does anyone have a take on this:

*-Wl,-z,relro,-z,now*
RELRO (read-only relocation). The options relro & now specified together
are known as "Full RELRO". You can specify "Partial RELRO" by omitting the
now flag. RELRO marks various ELF memory sections read­only (E.g. the GOT
<http://stackoverflow.com/questions/9688076/process-linkage-table-and-global-offset-table>
)

This is an option to gcc, when I run a checksec.sh script against the snort
binary, it comes back with Partial RELRO, rather than FULL.

Bill

------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!