Not quite sure what those linking errors actually mean, but wouldn't it be easier not to use those flags? Solaris has good support for Zones, so even in the unlikely event that some binary gets compromised, the damage could be minimal.