Provide full RELRO protection on Linux

Our fix in legacy/trac#12103 (closed) to provide RELRO protection causes checksec to report "partial" hardening. We need to figure out what that means and why it claims its only partial.