Since these binaries are going to be setuid root, we want don't want to allow lazy bindings, otherwise we allow some information leakage. http://bugs.gentoo.org/77526 --- iputils-s20071127/Makefile.orig 2008-09-16 16:53:46 +0300 +++ iputils-s20071127/Makefile 2008-09-16 16:56:22 +0300 @@ -33,8 +33,11 @@ tracepath: tracepath.o fixfds.o droppriv.o tracepath6: tracepath6.o fixfds.o droppriv.o traceroute6: traceroute6.o fixfds.o droppriv.o + $(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro ping: ping.o ping_common.o fixfds.o droppriv.o + $(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro ping6: ping6.o ping_common.o fixfds.o droppriv.o -lresolv -lcrypto + $(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro ping.o ping6.o ping_common.o: ping_common.h tftpd.o tftpsubs.o: tftp.h