Subject: Re: Importing PaX features to NetBSD
To: Elad Efrat <elad@NetBSD.org>
From: None <pageexec@freemail.hu>
List: tech-security
Date: 12/18/2005 23:49:20
On 18 Dec 2005 at 23:20, Pavel Cahyna wrote:
> Wouldn't it prevent future optimizations of the dynamic linker, which
> might require constant and known addresses of dynamic libraries? I think
> IRIX does that (don't know how RelCache was designed, maybe it applies
> there too).

you're right, randomization is in direct conflict with prelinking
(as it's called in the linux world), so you can have only one or
the other, not both (actually, with some extra logic you could
use a mix but it still wouldn't get back the full benefit of
prelinking). on the other hand, solaris has -Bdirect which is
another (and randomization compatible) way of speeding up runtime
linking, you might want to explore that path instead. there was
also a recent proposal for binutils to include -Bdirect [1].

[1] http://bugs.gentoo.org/show_bug.cgi?id=114008