FS#71191 - [syncthing] Add FULL RELRO drop inetutils

Attached to Project: Community Packages
Opened by loqs (loqs) - Wednesday, 09 June 2021, 00:42 GMT
Last edited by Jaroslav Lichtblau (Dragonlord) - Sunday, 12 September 2021, 12:03 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Jaroslav Lichtblau (Dragonlord)
Architecture All
Severity Very Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
syncthing lacks full relro as $LDFLAGS are not used by build.go. build.go will add flags from EXTRA_LDFLAGS.
Use of hostname was dropped in [1] v0.9.6+. The recorded hostname is set by the variable BUILD_HOST defined in the PKGBUILD.
[2] Uses EXTRA_LDFLAGS to set $LDFLAGS, drops inetutils. It also sets BUILD_USER to ${pkgbase} for increased reproducibility.
[3] An alternative approach, stops using build.go instead it invokes go build directly.

Additional info:
* syncthing 1.17.0-1
[1] https://github.com/syncthing/syncthing/commit/b221e4d4454285831444a02d332bc3deb2bf19a4
[2] PKGBUILD.diff.1
[3] PKGBUILD.diff.2
This task depends upon

Closed by  Jaroslav Lichtblau (Dragonlord)
Sunday, 12 September 2021, 12:03 GMT
Reason for closing:  Implemented
Additional comments about closing:  Implemented in syncthing 1.18.2-1

Comment by Jaroslav Lichtblau (Dragonlord) - Sunday, 12 September 2021, 12:03 GMT
Implemented in syncthing 1.18.2-1
Thanks for providing the patches!

Loading...