[pkgsrc/trunk]: pkgsrc/mk/defaults mk: Lower default RELRO down from full to ...

[nia <nia%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/503d7c581815
branches:  trunk
changeset: 768857:503d7c581815
user:      nia <nia%pkgsrc.org@localhost>
date:      Tue Nov 02 09:02:48 2021 +0000

description:
mk: Lower default RELRO down from full to partial.

Judging by private discussions there's not clear enough consensus
that BIND_NOW is beneficial or performant enough to have enabled
by default, at least until more benchmarking tests are done.

diffstat:

 mk/defaults/mk.conf |  6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diffs (26 lines):

diff -r 3d68e50de8ed -r 503d7c581815 mk/defaults/mk.conf
--- a/mk/defaults/mk.conf       Tue Nov 02 08:30:38 2021 +0000
+++ b/mk/defaults/mk.conf       Tue Nov 02 09:02:48 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf,v 1.320 2021/09/27 14:38:31 nia Exp $
+# $NetBSD: mk.conf,v 1.321 2021/11/02 09:02:48 nia Exp $
 #
 
 # This file provides default values for variables that may be overridden
@@ -271,14 +271,14 @@
 #
 # Keywords: fortify FORTIFY_SOURCE
 
-PKGSRC_USE_RELRO?= full
+PKGSRC_USE_RELRO?= partial
 # Link with RELRO by default (on supported platforms). This makes the
 # exploitation of some security vulnerabilities more difficult in some cases.
 # Possible values:
 #      no:      Do not pass any flags for RELRO
 #      partial: Pass -Wl,-z,relro
 #      full:    Pass -Wl,-z,relro -Wl,-z,now
-# Default: full
+# Default: partial
 #
 # Keywords: relro