<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div style="" class="markdown-here-wrapper"
      data-md-url="Thunderbird">
      <p style="margin: 1.2em 0px ! important;">Bill, </p>
      <p style="margin: 1.2em 0px ! important;"> I dont know of these
        options; care to point us at some literature?</p>
      <p style="margin: 1.2em 0px ! important;"> Does this stuff prevent
        someone from calling <code style="font-size: 0.85em; font-family: Consolas,Inconsolata,Courier,monospace;margin: 0px 0.15em; padding: 0px 0.3em; white-space: pre-wrap; border: 1px solid rgb(234, 234, 234); background-color: rgb(248, 248, 248); border-radius: 3px; display: inline;">mprotect</code>
        and just making the memory writable?</p>
      <p style="margin: 1.2em 0px ! important;">On 3/15/16 16:22, Bill
        Parker wrote:</p>
      <p style="margin: 1.2em 0px ! important;"></p>
      <div class="markdown-here-exclude">
        <p></p>
        <blockquote
cite="mid:CAFrbyQysHt9pa5eaUeQRaym-LJ6i9kUPJfbbCfeRyA2VR=OyRA@...2500..."
          type="cite">
          <meta http-equiv="Context-Type" content="text/html;
            charset=UTF-8">
          <div dir="ltr">
            <div>
              <div>
                <div><font size="+1">Hi All,<br>
                    <br>
                  </font></div>
                <font size="+1">   Does anyone have a take on this:<br>
                  <br>
                  <strong>-Wl,-z,relro,-z,now</strong><br>
                  RELRO (read-only relocation). The options <code>relro</code>
                  & <code>now</code> specified together are known
                  as "Full RELRO". You can specify "Partial RELRO" by
                  omitting the <code>now</code> flag. RELRO marks
                  various ELF memory sections read­only (E.g. the <a
                    moz-do-not-send="true"
href="http://stackoverflow.com/questions/9688076/process-linkage-table-and-global-offset-table">GOT</a>)<br>
                  <br>
                </font></div>
              <font size="+1">This is an option to gcc, when I run a
                checksec.sh script against the snort binary, it comes
                back with Partial RELRO, rather than FULL.<br>
                <br>
              </font></div>
            <font size="+1">Bill<br>
            </font></div>
          <font size="+1"><br>
          </font>
          <fieldset class="mimeAttachmentHeader"></fieldset>
          <font size="+1"><br>
          </font>
          <pre wrap=""><font size="+1">This body part will be downloaded on demand.</font></pre>
          <font size="+1"><br>
          </font>
          <fieldset class="mimeAttachmentHeader"></fieldset>
          <font size="+1"><br>
          </font>
          <pre wrap=""><font size="+1">This body part will be downloaded on demand.</font></pre>
        </blockquote>
        <p></p>
      </div>
      <p style="margin: 1.2em 0px ! important;"></p>
      <div
title="MDH:PGZvbnQgc2l6ZT0iKzEiPkJpbGwsIDxicj4KICA8YnI+CkkgZG9udCBrbm93IG9mIHRoZXNlIG9wdGlvbnM7IGNhcmUgdG8gcG9pbnQgdXMgYXQgc29tZSBsaXRlcmF0dXJlPzxicj4KICA8YnI+CkRv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        b3RlPg=="
style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0em;padding:0;margin:0;">​</div>
    </div>
  </body>
</html>