Debugging practices and hardened packages

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

Fedora enables hardened builds [1] by default.
This implies  -fomit-frame-pointer -fstack-protector and -fPIE.

[1]: https://fedoraproject.org/wiki/Packaging:Guidelines#PIE

How it is supposed to be debugged by upstream developers?

It would be nice to have **at least** a proper backtrace for crashed daemons.
Even better to have a) coredump b) binary c) debug symbols for this version of binary.
Otherwise I can't suggest to use such packages for the end users.

Does ABRT [2] actually work? Who have experience with it on production?
Is there somewhere a guide for sysadmins about a preferred way to produce meaningful
bug reports with stripped hardened binaries?

[2]: https://fedoraproject.org/wiki/Features/ABRT

Thanks!

-- 
WBR,
  Roman Tsisyk <roman@xxxxxxxxxxxxx>
  http://tarantool.org/ - an efficient in-memory data store and a Lua application server
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
http://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux