What | Removed | Added |
---|---|---|
Flags | needinfo?(meissner@suse.com) |
-z now is part of "Full RELRO", which security scanner complain about now, if not present. While its contribution to overall binary hardening is small, it is non-zero. It is a competitive disadvantage not to have it enabled by default.