Opt out of bindow (closes: #837562)
quoting Niko from the bug: My understanding is that the Apache module parts (mod_embperl) get compiled into Embperl.so, but don't get used unless the thing is loaded by Apache. The 'bindnow' hardening is incompatible with this scheme; from the ld(1) documentation for '-z now': When generating an executable or shared library, mark it to tell the dynamic linker to resolve all symbols when the program is started, or when the shared library is linked to using dlopen, instead of deferring function call resolution to the point when the function is first called. So when perl dlopens Embperl.so without Apache, the ap_* functions aren't needed but still get loaded (unsuccessfully).
parent
8a54391d
Please register or sign in to comment