Use static-pie to benefit from full ASLR

PiperOrigin-RevId: 623158855 Change-Id: Ibe6b77e45b78b1b46191876aedc35f9dd6d034ec
google · Apr 9, 2024 · 3191d1e · 3191d1e
1 parent 0b1b48c
commit 3191d1e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/sandboxed_api/sandbox2/examples/static/BUILD.bazel b/sandboxed_api/sandbox2/examples/static/BUILD.bazel
@@ -54,9 +54,9 @@ cc_binary(
     name = "static_bin",
     srcs = ["static_bin.cc"],
     copts = sapi_platform_copts(),
-    features = [
-        "-pie",
-        "fully_static_link",  # link libc statically
+    linkopts = [
+        "-static-pie",
+        "-fuse-ld=bfd",
     ],
     linkstatic = 1,
 )

diff --git a/sandboxed_api/sandbox2/examples/static/CMakeLists.txt b/sandboxed_api/sandbox2/examples/static/CMakeLists.txt
@@ -43,5 +43,5 @@ set_target_properties(sandbox2_static_bin PROPERTIES OUTPUT_NAME static_bin)
 add_executable(sandbox2::static_bin ALIAS sandbox2_static_bin)
 target_link_libraries(sandbox2_static_bin PRIVATE
   sapi::base
-  -static  # Fully static link
+  -static-pie  # Fully static link
 )