RELRO and Xorg
Hinnerk van Bruinehsen <h.v.bruinehsen-j/[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
Hi, If one builds Xorg it's build with only partial RELRO enabled (test e.g. with checksec.sh). This is caused by the xorg-2.eclass and affects seemingly all packages that use that eclass (It has a conditional that checks if hardened is used and filters some flags). Does anyone know why this is the case? Is it a legacy issue or are there valid reasons why Xorg is build with only partial RELRO? I've tried to build it on my systems with full RELRO (by adding -z,relro,-z,now to the filter inside the eclass) and it works without issues so far. WKR Hinnerk
signature.asc
(application/pgp-signature, 490 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.21 (GNU/Linux) iQEcBAEBAgAGBQJSSXFtAAoJEJwwOFaNFkYc6rMH/A2e+VhwYZkcpxFuxu6gzhDg eBZtEQUt4eelNDJ1wyGmb6NWtTazAe+oPI/0sD3pp6wSzl+mvB3YvzbNR4sdd1bJ mfpW8RcsRV/Sc2HWCe2tHjOUYUxWh1Ez2zOHmlaNMb8sRYHDLnYJsYYUvaoFPZxu to8/tYdqZOiHCQ1riiWiCi9LmFOy8AoKAk3nF6v4V0sxUZsKIOXnESXME5rFOlBV EWFae3dTHRDYLLmA4zvsbu5zrsGz9WTe3IKvF44GFPIveXjC11A9hLpc+GCEK/F8 /2i33z3RV8WlaNz+2z7RwqUtzapwG3BFO4bYcFDwQTRFc99zg4JL4nsq7x9r6Q8= =CrLS -----END PGP SIGNATURE-----