----- Original Message ----- > From: "Moez Roy" <moez.roy@xxxxxxxxx> > To: "Development discussions related to Fedora" <devel@xxxxxxxxxxxxxxxxxxxxxxx> > Cc: "David Airlie" <airlied@xxxxxxxxxx>, "Adam Jackson" <ajax@xxxxxxxxxx>, "Till Maas" <opensource@xxxxxxxxx> > Sent: Monday, 2 March, 2015 1:15:19 PM > Subject: Re: hardening breaks X.org > > On Sun, Mar 1, 2015 at 5:16 PM, David Airlie <airlied@xxxxxxxxxx> wrote: > > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > > > Thanks guys, my system is more secure, but I can't run any apps. > > > > Anyways enough snark from me, the problem seems to be that hardening > > makes bind now override RTLD_LAZY options, and the X server relies > > on the RTLD_LAZY on its drivers being lazy. > > > > So should I > > > > a) turn off hardened builds for all Xorg server/driver packages? > > > > b) or is there a way to get partial relro back? > > > > Dave. > > -- > > devel mailing list > > devel@xxxxxxxxxxxxxxxxxxxxxxx > > https://admin.fedoraproject.org/mailman/listinfo/devel > > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > > In RHEL 7.1 beta I see in the changelog: > > 2014-09-17 Adam Jackson <ajax@xxxxxxxxxx> 1.15.0-27 > - Link Xorg as a PIE > > and > > 2014-02-25 Adam Jackson <ajax@xxxxxxxxxx> 1.15.0-6 > - Fix dist tag > - Link Xorg with -z now > > This works fine for the X server itself, since its not a shared library. However the drivers can't use -z now, that new flags forced this on everywhere. Dave. -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct