meson.build: disable ld.so lazy binding and enable relro

Since MPD is a long-running daemon, it doesn't make sense to use dynamic binding. That allows the relocations to be read-only ("relro"), which a hardening feature.

meson.build: disable ld.so lazy binding and enable relro
4f40b9f7 · Max Kellermann · bb009daf · 4f40b9f7
Commit 4f40b9f7 authored Nov 04, 2020 by Max Kellermann
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

meson.build meson.build +5 -0

No files found.
--- a/meson.build
+++ b/meson.build
@@ -96,6 +96,11 @@ test_cflags = test_common_flags + [
 ]

 test_ldflags = [
+  # make relocations read-only (hardening)
+  '-Wl,-z,relro',
+
+  # no lazy binding, please - not worth it for a daemon
+  '-Wl,-z,now',
 ]

 if get_option('buildtype') != 'debug'