hardening-no-bindnow
This package provides an ELF binary that lacks the "bindnow" linker flag.
This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why).
If you use dpkg-buildflags, you may have to add
hardening=+bindnow or hardening=+all to
DEB_BUILD_MAINT_OPTIONS.
The relevant compiler flags are set in LDFLAGS.
For more information please consult:
The tag is present in Lintian version 2.114.163.
That is the most recent version we know about.
We use semantic versions.
The patch number is a commit step indicator relative to the
2.114.0
release tag in our Git
repository.
You can find the detection logic for this version at commit 2ff4e94. For merge requests, please use the latest version in the Lintian check binaries/hardening.
Visibility: info