[GR-46838] Build libgraal with 'Full RELRO' to prevent GOT overwriting exploits.

PullRequest: graal/15047

Author: olpaw

substratevm/mx.substratevm/mx_substratevm.py

@@ -1216,7 +1216,10 @@ def _native_image_launcher_extra_jvm_args():
 ] + ([
    # Force page size to support libgraal on AArch64 machines with a page size up to 64K.
    '-H:PageSize=64K'
-] if mx.get_arch() == 'aarch64' else [])
+] if mx.get_arch() == 'aarch64' else []) + ([
+   # Build libgraal with 'Full RELRO' to prevent GOT overwriting exploits on Linux (GR-46838)
+   '-H:NativeLinkerOption=-Wl,-z,relro,-z,now',
+] if mx.is_linux() else [])
 
 libgraal = mx_sdk_vm.GraalVmJreComponent(
     suite=suite,