Lintian ReportsBETA

Ihardening-no-bindnow

Tag versions

The tag is present in Lintian version 2.104.319. That is the most recent version we know about.

This package provides an ELF binary that lacks the "bindnow" linker flag.

This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why).

If you use dpkg-buildflags, you may have to add hardening=+bindnow or hardening=+all to DEB_BUILD_MAINT_OPTIONS.

The relevant compiler flags are set in LDFLAGS.

Please refer to https://wiki.debian.org/Hardening for details.

Visibility: info

Check: binaries

The following 6522 source packages in the archive triggered the tag 39294 times.

We found 573 overrides. The tag performed 99% of the time.