toolchain: glibc: Enable --enable-bind-now

Enable --enable-bind-now when CONFIG_PKG_RELRO_FULL is set. This option
is activated by default. This will enable full RELRO protection.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

diff --git a/toolchain/glibc/common.mk b/toolchain/glibc/common.mk
index 19610c1e904e8b983dfd51d82f8619021d51dcd8..e957ff52e509a59036560de01787e6f0eec33d54 100644 (file)
--- a/toolchain/glibc/common.mk
+++ b/toolchain/glibc/common.mk
@@ -63,6 +63,7 @@ GLIBC_CONFIGURE:= \
                --$(if $(CONFIG_SOFT_FLOAT),without,with)-fp \
                  $(if $(CONFIG_PKG_CC_STACKPROTECTOR_REGULAR),--enable-stack-protector=yes) \
                  $(if $(CONFIG_PKG_CC_STACKPROTECTOR_STRONG),--enable-stack-protector=strong) \
+                 $(if $(CONFIG_PKG_RELRO_FULL),--enable-bind-now) \
                --enable-kernel=5.4.0
 
 export libc_cv_ssp=no