FS#71191 - [syncthing] Add FULL RELRO drop inetutils
Attached to Project:
Community Packages
Opened by loqs (loqs) - Wednesday, 09 June 2021, 00:42 GMT
Last edited by Jaroslav Lichtblau (Dragonlord) - Sunday, 12 September 2021, 12:03 GMT
Opened by loqs (loqs) - Wednesday, 09 June 2021, 00:42 GMT
Last edited by Jaroslav Lichtblau (Dragonlord) - Sunday, 12 September 2021, 12:03 GMT
|
Details
Description:
syncthing lacks full relro as $LDFLAGS are not used by build.go. build.go will add flags from EXTRA_LDFLAGS. Use of hostname was dropped in [1] v0.9.6+. The recorded hostname is set by the variable BUILD_HOST defined in the PKGBUILD. [2] Uses EXTRA_LDFLAGS to set $LDFLAGS, drops inetutils. It also sets BUILD_USER to ${pkgbase} for increased reproducibility. [3] An alternative approach, stops using build.go instead it invokes go build directly. Additional info: * syncthing 1.17.0-1 [1] https://github.com/syncthing/syncthing/commit/b221e4d4454285831444a02d332bc3deb2bf19a4 [2] PKGBUILD.diff.1 [3] PKGBUILD.diff.2 |
This task depends upon
Closed by Jaroslav Lichtblau (Dragonlord)
Sunday, 12 September 2021, 12:03 GMT
Reason for closing: Implemented
Additional comments about closing: Implemented in syncthing 1.18.2-1
Sunday, 12 September 2021, 12:03 GMT
Reason for closing: Implemented
Additional comments about closing: Implemented in syncthing 1.18.2-1
Thanks for providing the patches!