Lintian tag: hardening-no-bindnow

Type: information

Description (from lintian-explain-tags)

This package provides an ELF binary that lacks the "bindnow" linker flag.

This is needed (together with "relro") to make the "Global Offset Table"
(GOT) fully read-only. The bindnow feature trades startup time for
improved security. Please consider enabling this feature or consider
overriding the tag (possibly with a comment about why).

If you use dpkg-buildflags, you may have to add hardening=+bindnow or
hardening=+all to DEB_BUILD_MAINT_OPTIONS.

The relevant compiler flags are set in LDFLAGS.

Please refer to https://wiki.debian.org/Hardening for details.

Visibility: info
Show-Always: no
Check: binaries/hardening

Show affected packages