CVS commit: pkgsrc/mk/defaults

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Tue Nov  2 09:02:49 UTC 2021

Modified Files:
        pkgsrc/mk/defaults: mk.conf

Log Message:
mk: Lower default RELRO down from full to partial.

Judging by private discussions there's not clear enough consensus
that BIND_NOW is beneficial or performant enough to have enabled
by default, at least until more benchmarking tests are done.


To generate a diff of this commit:
cvs rdiff -u -r1.320 -r1.321 pkgsrc/mk/defaults/mk.conf

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mk/defaults/mk.conf
diff -u pkgsrc/mk/defaults/mk.conf:1.320 pkgsrc/mk/defaults/mk.conf:1.321
--- pkgsrc/mk/defaults/mk.conf:1.320    Mon Sep 27 14:38:31 2021
+++ pkgsrc/mk/defaults/mk.conf  Tue Nov  2 09:02:48 2021
@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf,v 1.320 2021/09/27 14:38:31 nia Exp $
+# $NetBSD: mk.conf,v 1.321 2021/11/02 09:02:48 nia Exp $
 #
 
 # This file provides default values for variables that may be overridden
@@ -271,14 +271,14 @@ PKGSRC_USE_FORTIFY?= strong
 #
 # Keywords: fortify FORTIFY_SOURCE
 
-PKGSRC_USE_RELRO?= full
+PKGSRC_USE_RELRO?= partial
 # Link with RELRO by default (on supported platforms). This makes the
 # exploitation of some security vulnerabilities more difficult in some cases.
 # Possible values:
 #      no:      Do not pass any flags for RELRO
 #      partial: Pass -Wl,-z,relro
 #      full:    Pass -Wl,-z,relro -Wl,-z,now
-# Default: full
+# Default: partial
 #
 # Keywords: relro