1Build all binaries with the 2.Dv DF_BIND_NOW 3flag set to indicate that the run-time loader should perform all relocation 4processing at process startup rather than on demand. 5The combination of the 6.Va BIND_NOW 7and 8.Va RELRO 9options provide "full" Relocation Read-Only (RELRO) support. 10With full RELRO the entire GOT is made read-only after performing relocation at 11startup, avoiding GOT overwrite attacks. 12