Re: Expanding the list of "Hardened Packages"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Saturday, April 13, 2013 12:28:04 PM Jerry James wrote:
> > I have not run the script that checks a distribution on F19 yet, so maybe
> > there are more?
> > 
> > http://people.redhat.com/sgrubb/files/rpm-chksec
> 
> That script reports all .o files (yes, those are sometimes packaged)
> as "exec no no", with a red "no" in the RELRO column.  But RELRO
> doesn't make any sense for a .o, so perhaps that should be a green
> "N/A" instead.

Probably. But it has caught a few packages that did not even know they were 
shipping .o files and they removed them right away. That's a tough one. I can 
probably fix it to reclassify them not as an exec and that would make the 
triage easier.

-Steve
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux