Commit 6f9a87fd authored by Ondřej Surý's avatar Ondřej Surý
Browse files

Merge branch '1933-disable-static-linking' into 'main'

Disable and disallow static linking

Closes #1933

See merge request !3697
parents 789e5f4a 7f24d4b4
Pipeline #45047 passed with stages
in 2 minutes and 44 seconds
5444. [bug] 'rndc dnstap -roll <value>' was not limiting the
......@@ -119,7 +119,10 @@ AX_POSIX_SHELL
# Initialize libtool
LT_INIT([disable-static dlopen pic-only])
AS_IF([test $enable_static != "no"],
[AC_MSG_ERROR([Static linking is not supported as it disables dlopen() and certain security features (e.g. RELRO, ASLR)])])
......@@ -29,7 +29,12 @@ New Features
Feature Changes
- None.
- Disable and disallow static linking of BIND 9 binaries and libraries
as BIND 9 modules require ``dlopen()`` support and static linking also
prevents using security features like read-only relocations (RELRO) or
address space layout randomization (ASLR) which are important for
programs that interact with the network and process arbitrary user
input. [GL #1933]
Bug Fixes
Markdown is supported
0% or .
Finish editing this message first!
Please register or to comment