diff options
| author | H.J. Lu <hjl.tools@gmail.com> | 2017-12-19 13:51:01 -0800 |
|---|---|---|
| committer | H.J. Lu <hjl.tools@gmail.com> | 2017-12-19 13:51:16 -0800 |
| commit | 126adc89d8a32193df075ce665e76ad95ebd0557 (patch) | |
| tree | 2016db69e9f2221fb0a4f3b40651d2b819df069f /manual | |
| parent | 648615e13f8d7b638cb911926b8bb70804217f15 (diff) | |
Document that --enable-static-pie implies PIE
To build static PIE, all .o files are compiled with -fPIE. Since
--enable-static-pie is designed to provide additional security hardening
benefits, it also implies that glibc programs and tests are created as
dynamic position independent executables (PIE) by default for better
security hardening.
Reviewed-by: Jonathan Nieder <jrnieder@gmail.com>
* manual/install.texi: Document that --enable-static-pie
implies PIE.
* INSTALL: Regenerated.
Diffstat (limited to 'manual')
| -rw-r--r-- | manual/install.texi | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/manual/install.texi b/manual/install.texi index fb956b5d6a..50e6c35050 100644 --- a/manual/install.texi +++ b/manual/install.texi @@ -123,7 +123,8 @@ address without help from a dynamic linker. All static programs as well as static tests are built as static PIE, except for those marked with no-pie. The resulting glibc can be used with the GCC option, -static-pie, which is available with GCC 8 or above, to create static -PIE. +PIE. This option also implies that glibc programs and tests are created +as dynamic position independent executables (PIE) by default. @item --disable-profile Don't build libraries with profiling information. You may want to use |