grsecurity forums

I'm just curious on the state of readonly GOT/PLT/.dtors, are these implemented yet? I looked at the source and didn't see anything related to it unless I'm obviously missing something? hehe Are there plans to implement these in the furture perhaps? Thanks!

ralphy wrote:I'm just curious on the state of readonly GOT/PLT/.dtors, are these implemented yet? I looked at the source and didn't see anything related to it unless I'm obviously missing something? hehe Are there plans to implement these in the furture perhaps? Thanks!

these are userland changes and i didn't get that far yet. fortunately these particular features have been implemented in the GNU toolchain over the past 2-3 years, google up gcc/binutils support for GNU_RELRO and BIND_NOW in ELF binaries or just look at how hardened gentoo makes use of them. there's also better PLT support for alpha/ppc these days created by -msecure-plt.