Re: Harden_all_packages_with_position-independent_code + guile modules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 12/03/15 14:41, Adam Jackson wrote:
On Thu, 2015-03-12 at 13:45 +0000, Petr Pisar wrote:

However I can add my recent story: After hardening perl, loading a DSO
by perl failed. I believe the reason was the DSO had an undefined symbol
which was not defined in any SO_NEEDed libraries. But because the symbol
was never used at run-time, before hardening the executable, run-time
linking passed. But after hardening, the -znow feature caused resolving
all symbols at link time, including the missing symbol, so dlopen(3)
failed.

We may want to revisit this, honestly.  The actual proposal was just to
build executables as PIE, right?  Forcing -z now is a bit more than
maybe was expected.

On top of which there seems, despite a number of questions posted here since the change went live, very little assistance from the proposal owners with fixing packages that have been broken by it.

Tom

--
Tom Hughes (tom@xxxxxxxxxx)
http://compton.nu/
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux