1bf81eb3cSEd MasteBuild all binaries with the 2bf81eb3cSEd Maste.Dv DF_BIND_NOW 3bf81eb3cSEd Masteflag set to indicate that the run-time loader should perform all relocation 4bf81eb3cSEd Masteprocessing at process startup rather than on demand. 5*2f3a9614SEd MasteThe combination of the 6*2f3a9614SEd Maste.Va BIND_NOW 7*2f3a9614SEd Masteand 8*2f3a9614SEd Maste.Va RELRO 9*2f3a9614SEd Masteoptions provide "full" Relocation Read-Only (RELRO) support. 10*2f3a9614SEd MasteWith full RELRO the entire GOT is made read-only after performing relocation at 11*2f3a9614SEd Mastestartup, avoiding GOT overwrite attacks. 12