On 29 April 2016 at 13:17, Michael Hudson-Doyle <michael.hud...@canonical.com> wrote: > On 29 April 2016 at 12:40, Peter Colberg <pe...@colberg.org> wrote: >> Hi Michael, >> >> On Wed, Apr 27, 2016 at 01:35:30PM +1200, Michael Hudson-Doyle wrote: >>> I think only pie, bindnow and relro make sense for Go. >> >> I figured out how to link with BINDNOW and RELRO using -extldflags: >> >> # Pass hardening flags to linker >> GO_LDFLAGS += -extldflags=-Wl,-z,now,-z,relro > > Ah yes, makes sense. TBH, I wonder about changing Go to always pass > those flags...
In fact, I'm pretty sure that not passing relro is just a bug: https://github.com/golang/go/issues/15485 Cheers, mwh
