[pkg-golang-devel] Bug#821454: [pkg-go] Bug#821454: dh-golang: Position-independent executables (PIE)

Michael Hudson-Doyle michael.hudson at canonical.com
Fri Apr 29 01:30:52 UTC 2016


On 29 April 2016 at 13:17, Michael Hudson-Doyle
<michael.hudson at canonical.com> wrote:
> On 29 April 2016 at 12:40, Peter Colberg <peter at colberg.org> wrote:
>> Hi Michael,
>>
>> On Wed, Apr 27, 2016 at 01:35:30PM +1200, Michael Hudson-Doyle wrote:
>>> I think only pie, bindnow and relro make sense for Go.
>>
>> I figured out how to link with BINDNOW and RELRO using -extldflags:
>>
>> # Pass hardening flags to linker
>> GO_LDFLAGS += -extldflags=-Wl,-z,now,-z,relro
>
> Ah yes, makes sense. TBH, I wonder about changing Go to always pass
> those flags...

In fact, I'm pretty sure that not passing relro is just a bug:
https://github.com/golang/go/issues/15485

Cheers,
mwh



More information about the pkg-golang-devel mailing list