RELRO and Xorg

Hinnerk van Bruinehsen <h.v.bruinehsen-j/[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
Hi,

If one builds Xorg it's build with only partial RELRO enabled (test e.g. with
checksec.sh).
This is caused by the xorg-2.eclass and affects seemingly all packages that use
that eclass (It has a conditional that checks if hardened is used and filters
some flags).
Does anyone know why this is the case? Is it a legacy issue or are there valid
reasons why Xorg is build with only partial RELRO?
I've tried to build it on my systems with full RELRO (by adding -z,relro,-z,now
to the filter inside the eclass) and it works without issues so far.

WKR
Hinnerk
signature.asc (application/pgp-signature, 490 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.21 (GNU/Linux)

iQEcBAEBAgAGBQJSSXFtAAoJEJwwOFaNFkYc6rMH/A2e+VhwYZkcpxFuxu6gzhDg
eBZtEQUt4eelNDJ1wyGmb6NWtTazAe+oPI/0sD3pp6wSzl+mvB3YvzbNR4sdd1bJ
mfpW8RcsRV/Sc2HWCe2tHjOUYUxWh1Ez2zOHmlaNMb8sRYHDLnYJsYYUvaoFPZxu
to8/tYdqZOiHCQ1riiWiCi9LmFOy8AoKAk3nF6v4V0sxUZsKIOXnESXME5rFOlBV
EWFae3dTHRDYLLmA4zvsbu5zrsGz9WTe3IKvF44GFPIveXjC11A9hLpc+GCEK/F8
/2i33z3RV8WlaNz+2z7RwqUtzapwG3BFO4bYcFDwQTRFc99zg4JL4nsq7x9r6Q8=
=CrLS
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.