3 ms·
Glad to see this security by default progress from RedHat. I was surprised to not see a discussion of the costs, though. How much slower is program startup fo
by onedognight 5y ago
Glad to see this security by default progress from RedHat. I was surprised to not see a discussion of the costs, though. How much slower is program startup for large programs now that all these functions are unconditionally looked up at the start instead of lazily? Even functions that are never called are now looked up.
- saagarjha 5y agoThere’s a one sentence nod to this at the bottom: > Using full RELRO has a slight performance impact during application startup (as the linker has to populate the GOT entries before entering the main function). In general, the difference for a large application is non-negligible and one should carefully consider the impact before enabling this feature by default.
- tpetry 5y ago> In general, the difference for a large application is non-negligible and one should carefully consider the impact before enabling this feature by default. And because of that they enabled it for all binaries on Fedora. The fedora users are now testing whether it's possible to activate it by default.
- pjmlp 5y agoFrom security assessment of view, I consider the impact as being the monetary damage that might happen if an exploit is taken advantage of. Naturally one might consider it doesn't matter for the use case at hand.
- loeg 5y agoHow often are you starting large applications, and how do you define non-negligible here? Milliseconds?
- saagarjha 5y agoThis might be important if you're doing something like repeatedly spawning a large shell interpreter, for example.