[gentoo-hardened] Proposal: ld.gold --rosegment

2016-01-27 Thread Alessandro Di Federico
Hi, as you might know, global read-only data (e.g. the .rodata section) usually end up in the same segment as .text. This means that .rodata contains potentially executable data, which is always useful for an attacker looking for ROP gadgets. However, the gold linker has a nice option (--rosegment

Re: [gentoo-hardened] Proposal: ld.gold --rosegment

2016-01-27 Thread PaX Team
On 28 Jan 2016 at 0:30, Alessandro Di Federico wrote: > Hi, as you might know, global read-only data (e.g. the .rodata section) > usually end up in the same segment as .text. This means that .rodata > contains potentially executable data, which is always useful for an > attacker looking for ROP ga