From 348ebf016a72b7f6c96ff174843ae29269cebdb2 Mon Sep 17 00:00:00 2001
From: Andrew Noyes <andrew@weaselab.dev>
Date: Fri, 29 Mar 2024 21:51:02 -0700
Subject: [PATCH] Enable relro for shared lib

---
 CMakeLists.txt | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index bac11f6..ae561bb 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -78,8 +78,10 @@ if(NOT CMAKE_BUILD_TYPE STREQUAL Debug)
 endif()
 
 if(NOT APPLE)
-  target_link_options(${PROJECT_NAME} PRIVATE
-                      LINKER:--version-script=${CMAKE_SOURCE_DIR}/linker.map)
+  target_link_options(
+    ${PROJECT_NAME} PRIVATE
+    LINKER:--version-script=${CMAKE_SOURCE_DIR}/linker.map
+    LINKER:-z,relro,-z,now,-z,noexecstack)
 endif()
 
 add_library(${PROJECT_NAME}-static STATIC