Skip to content

Disable and disallow static linking

Ondřej Surý requested to merge 1933-disable-static-linking into main

The programs and libraries linked statically disables several important features that BIND 9 relies on:

  • dlopen() - the dynamic loading of modules, dlz, and dyndb won't work
  • RELRO and ASLR - read-only relocations, and full address-space layout randomization are important security features for any program interacting with the network or user input

Thus in this commit we are disabling and disallowing the static linking in BIND 9 to simplify the dependency on dlopen() and protect the users by keeping RELRO and ASLR always enabled.

Closes #1933 (closed)

Edited by Ondřej Surý

Merge request reports