This is the mail archive of the
glibc-cvs@sourceware.org
mailing list for the glibc project.
GNU C Library master sources branch master updated. glibc-2.26.9000-1019-g126adc8
- From: hjl at sourceware dot org
- To: glibc-cvs at sourceware dot org
- Date: 19 Dec 2017 21:51:28 -0000
- Subject: GNU C Library master sources branch master updated. glibc-2.26.9000-1019-g126adc8
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU C Library master sources".
The branch, master has been updated
via 126adc89d8a32193df075ce665e76ad95ebd0557 (commit)
from 648615e13f8d7b638cb911926b8bb70804217f15 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=126adc89d8a32193df075ce665e76ad95ebd0557
commit 126adc89d8a32193df075ce665e76ad95ebd0557
Author: H.J. Lu <hjl.tools@gmail.com>
Date: Tue Dec 19 13:51:01 2017 -0800
Document that --enable-static-pie implies PIE
To build static PIE, all .o files are compiled with -fPIE. Since
--enable-static-pie is designed to provide additional security hardening
benefits, it also implies that glibc programs and tests are created as
dynamic position independent executables (PIE) by default for better
security hardening.
Reviewed-by: Jonathan Nieder <jrnieder@gmail.com>
* manual/install.texi: Document that --enable-static-pie
implies PIE.
* INSTALL: Regenerated.
diff --git a/ChangeLog b/ChangeLog
index d194a73..9d567b2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2017-12-19 H.J. Lu <hongjiu.lu@intel.com>
+
+ * manual/install.texi: Document that --enable-static-pie
+ implies PIE.
+ * INSTALL: Regenerated.
+
2017-12-19 Bernd Edlinger <bernd.edlinger@hotmail.de>
[BZ #21309]
diff --git a/INSTALL b/INSTALL
index 9a1404b..42508e6 100644
--- a/INSTALL
+++ b/INSTALL
@@ -93,7 +93,9 @@ will be used, and CFLAGS sets optimization options for the compiler.
programs as well as static tests are built as static PIE, except
for those marked with no-pie. The resulting glibc can be used with
the GCC option, -static-pie, which is available with GCC 8 or
- above, to create static PIE.
+ above, to create static PIE. This option also implies that glibc
+ programs and tests are created as dynamic position independent
+ executables (PIE) by default.
'--disable-profile'
Don't build libraries with profiling information. You may want to
diff --git a/manual/install.texi b/manual/install.texi
index fb956b5..50e6c35 100644
--- a/manual/install.texi
+++ b/manual/install.texi
@@ -123,7 +123,8 @@ address without help from a dynamic linker. All static programs as
well as static tests are built as static PIE, except for those marked
with no-pie. The resulting glibc can be used with the GCC option,
-static-pie, which is available with GCC 8 or above, to create static
-PIE.
+PIE. This option also implies that glibc programs and tests are created
+as dynamic position independent executables (PIE) by default.
@item --disable-profile
Don't build libraries with profiling information. You may want to use
-----------------------------------------------------------------------
Summary of changes:
ChangeLog | 6 ++++++
INSTALL | 4 +++-
manual/install.texi | 3 ++-
3 files changed, 11 insertions(+), 2 deletions(-)
hooks/post-receive
--
GNU C Library master sources