On 19/10/2020 18:12, Jessica Clarke wrote:
This seems bizarre. What it means is that it is actually necessary weaken security by making immutable data writeable in order to allow absolute addresses. I would have expected the loader to deal with the relocations in the read-only data area and then remove write access from the pages. Is there any way round this?
Yes, using .data.rel.ro., i.e. relocatable read-only data.
Thanks, Jess. That seems to work, at least on SELinux and Alpine. OpenBSD seems to still want it to be writeable.
David