Add option to compile in pie mode for enhanced security

Signed-off-by: Ondrej Fabry <ofabry@cisco.com>
ligato · Sep 14, 2018 · 7029479 · 7029479
1 parent c0d4c01
commit 7029479
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Makefile b/Makefile
@@ -11,6 +11,11 @@ ifeq ($(NOSTRIP),)
 LDFLAGS += -w -s
 endif
 
+ifeq ($(BUILDPIE),y)
+GO_BUILD_ARGS += -buildmode=pie
+LDFLAGS += -extldflags=-Wl,-z,now,-z,relro
+endif
+
 ifeq ($(V),1)
 GO_BUILD_ARGS += -v
 endif