Hi,
On 2022-08-30 13:24:39 -0400, Tom Lane wrote:
> Andres Freund <andres(at)anarazel(dot)de> writes:
> > Perhaps it'd be saner to default to building with -Wl,-z,now? That should fix
> > the problem too, right (and if we combine it with relro, it'd be a security
> > improvement to boot).
>
> Hm. Not sure if that works on NetBSD, but I'll check it out.
FWIW, it's a decently (well over 10 years) old thing I think. And it's documented in
the netbsd ld manpage and their packaging guide (albeit indirectly, with their
tooling doing the work of specifying the flags):
https://www.netbsd.org/docs/pkgsrc/hardening.html#hardening.audit.relrofull
Greetings,
Andres Freund