Since these binaries are going to be setuid root, we want

don't want to allow lazy bindings, otherwise we allow some

information leakage.

http://bugs.gentoo.org/77526

--- iputils-s20071127/Makefile.orig	2008-09-16 16:53:46 +0300

+++ iputils-s20071127/Makefile	2008-09-16 16:56:22 +0300

@@ -33,8 +33,11 @@

 tracepath: tracepath.o fixfds.o droppriv.o

 tracepath6: tracepath6.o fixfds.o droppriv.o

 traceroute6: traceroute6.o fixfds.o droppriv.o

+	$(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro

 ping: ping.o ping_common.o fixfds.o droppriv.o

+	$(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro

 ping6: ping6.o ping_common.o fixfds.o droppriv.o -lresolv -lcrypto

+	$(LINK.o) $^ $(LDLIBS) -o $@ -Wl,-z,now -Wl,-z,relro

 ping.o ping6.o ping_common.o: ping_common.h

 tftpd.o tftpsubs.o: tftp.h