configure: build position independent executables on x86-Linux hosts
authorAvi Kivity <avi@redhat.com>
Tue, 15 Nov 2011 18:12:17 +0000 (20:12 +0200)
committerAnthony Liguori <aliguori@us.ibm.com>
Mon, 21 Nov 2011 21:05:59 +0000 (15:05 -0600)
commit15ba9c63b209c85e84ecded24eeefef3662b1a39
tree12bdf76893cd40f7c552a8a27348164bc788f4f9
parent60820752e3a78302179343963466d24676b614b3
configure: build position independent executables on x86-Linux hosts

Change the default on x86 Linux hosts to building PIE (position
independent executables); instead of restricting the option to
user-only targets, apply it to all targets.

In addition, set the relocation sections to read-only (relro) when
available; this reduces the attack surface by disallowing changes to
relocation tables at runtime.

While PIE reduces performance and relro increases load time, it
greatly improves security, with the potential to reduce a code
execution vulnerability to a self denial of service.

Non-x86 are not changed, as they require TCG changes; neither are
non-Linux, due to lack of test coverage.

Signed-off-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
configure