Hi Joe, Just FYI: RELRO support has been added to Android 4.1 (Jelly Bean) and (almost) everything is now compiled with -Wl,-z,relro and -Wl,-z,now. The NDK has also been modified, so that all third party native applications will automatically pick up relro protections. ( https://android-review.googlesource.com/36682)
-- Nick On Tue, Nov 22, 2011 at 9:13 PM, Nick Kralevich <[email protected]> wrote: > > The Android Linker does not currently support RELRO and BIND_NOW. We hope > to add support for this in an undetermined future release of Android. > > -- Nick > > > On Tue, Nov 15, 2011 at 10:45 AM, Joseph Cihula <[email protected]> wrote: > >> Can anyone from Google comment? >> Joe >> *From:* Joseph Cihula <[email protected]> >> *To:* "[email protected]" < >> [email protected]> >> *Sent:* Monday, November 7, 2011 3:15 PM >> *Subject:* [android-security-discuss] RELRO and BIND_NOW >> >> I can't find support for gcc's PT_GNU_RELRO segments in Android's dynamic >> linker. Is this because the system libs are prelinked and that allows the >> linker to make the GOT read only? If so, what about non-prelinked >> libraries--how are these protected? >> >> Joe >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To post to this group, send email to >> [email protected]. >> To unsubscribe from this group, send email to android-security-discuss+ >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/android-security-discuss?hl=en. >> >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To post to this group, send email to >> [email protected]. >> To unsubscribe from this group, send email to >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/android-security-discuss?hl=en. >> > > > > -- > Nick Kralevich | Android Security | [email protected] | 650.214.4037 > > -- Nick Kralevich | Android Security | [email protected] | 650.214.4037 -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
