[Bug 984185] perl should be a hardened build

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=984185

--- Comment #3 from Marcela Mašláňová <mmaslano@xxxxxxxxxx> ---
I was speaking to the Security team, because I was interested in their point of
view. The common practice until now was "add the full relro to long time
running apps, especially daemons".

In opinion of Security team, languages don't need full relro if they don't
write into pointers like this example:
http://cs.potsdam.edu/cgi-bin/man/man2html?Glib::Object+3
Glib::Object->new_from_pointer

Therefore Perl is a good candidate for full relro. I would like to see analysis
of slowdown of Perl examples and also all major components before we start
changing partial relro into full relro. I'd rather see same approach for whole
distribution than accidentally changing some apps.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bViOO4fGet&a=cc_unsubscribe
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/perl-devel





[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Legacy Announce]     [Fedora PHP Devel]     [Kernel Devel]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite Information]
  Powered by Linux