FS#26435 - [namcap] Print notice when GNU_RELRO is missing in ELF file.
Attached to Project:
Arch Linux
Opened by Sverd Johnsen (sjohnsen) - Friday, 14 October 2011, 01:22 GMT
Last edited by Doug Newgard (Scimmia) - Monday, 19 December 2016, 05:46 GMT
Opened by Sverd Johnsen (sjohnsen) - Friday, 14 October 2011, 01:22 GMT
Last edited by Doug Newgard (Scimmia) - Monday, 19 December 2016, 05:46 GMT
|
Details
When GNU_RELRO is missing in a ELF file, namcap should print
a notice informing the packager that LDFLAGS have been
ignored during the build.
Besides highlighting issues in upstream build configuration, RELRO is desirable for various reasons and has been in our LDFLAGS for quite a while now by default. readelf -p /bin/foo | grep GNU_RELRO |
This task depends upon
Closed by Doug Newgard (Scimmia)
Monday, 19 December 2016, 05:46 GMT
Reason for closing: Implemented
Monday, 19 December 2016, 05:46 GMT
Reason for closing: Implemented
Bumped.
Sadly, there's no viable way to do a reliable check for missing SSP (-fstack-protector-strong) because many small executables simply don't have viable candidate functions for it to protect.