On Thu, Jul 02, 2015 at 10:49:37AM -0400, Adam Jackson wrote: > Following up on the hardened cflags change in F23, I wanted to gather > some statistics on the actual impact: what the most impacted packages > and apps are, what the typical overhead is like, etc. The results > are... unpleasant, but not so much because of the hardening change > itself. I started by grabbing the x86_64 packages of everything koji > believes is in F23, unpacking them all, and then removing every file > that wasn't a dynamic ELF object. From this set, some observations. Thank you for this great analysis. Do you still have the executable files and can run checksec on them and publish the output somewhere? > There are 173 non-now binaries installed under /usr/share. 68 of those > are ircd-ratbox, and 56 are rubygem-gherkin. 7 are aircrack-ng, which > installs them into freaking /usr/share/doc! Come on, people. The error in aircrack-ng resulted from accidently pacakaging binary files from a "new" test suite into the doc. Initially it contained mainly capture files to try some of the tools. Since the binaries are not normally used or required I guess this does not cause any real trouble. Regards Till -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
