--- wikisrc/pkgsrc/hardening.mdwn 2016/03/17 03:51:51 1.6 +++ wikisrc/pkgsrc/hardening.mdwn 2016/03/17 13:27:17 1.7 @@ -71,6 +71,20 @@ Just like with `PKGSRC_MKPIE` above, thi crash, usually indicating an actual bug in the program. The fix will typically involve patching the original program. +## Problems with `PKGSRC_USE_RELRO` + +### Performance impact + +For better protection, full RELRO requires every symbol to be resolved when the +program starts, rather than lazily at run-time. This will have more impact on +programs using a lot of symbols, or linked to libraries exposing a lot of +symbols. Therefore, daemons or programs otherwise running in background are +affected only when started. Programs loading plug-ins at run-time are affected +when loading the plug-ins. + +The impact is not expected to be noticeable on modern hardware, except in some +cases for big programs. + ## Problems with `PKGSRC_USE_SSP` ### Packages failing to build