From c3d76bb254eb33dbe2cd23e00f5f135f3c12381c Mon Sep 17 00:00:00 2001
From: Richard Levitte <levitte@openssl.org>
Date: Thu, 15 Feb 2018 10:06:15 +0100
Subject: [PATCH] NOTES.UNIX: add additional note about --enable-new-dtags

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5374)
---
 NOTES.UNIX | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/NOTES.UNIX b/NOTES.UNIX
index 43146e9ed..32361072a 100644
--- a/NOTES.UNIX
+++ b/NOTES.UNIX
@@ -28,3 +28,15 @@
 
     $ ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl \
         -Wl,-rpath,'$(LIBRPATH)'
+
+ On modern systems using GNU ld.so, a better choice may be to use the
+ new dtags, like this:
+
+    $ ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl \
+        -Wl,--enable-new-dtags,-rpath,'$(LIBRPATH)'
+
+ This sets DT_RUNPATH instead of DT_RPATH.  DT_RUNPATH is considered after
+ the environment variable LD_LIBRARY_PATH, while DT_RPATH is considered
+ before that environment variable (which means that the values in that
+ environment variable won't matter if the library is found in the
+ paths given by DT_RPATH).