On Fri, Oct 22, 2021 at 02:22:22PM +0100, Richard W.M. Jones wrote: > > I could use some help on this thread about Fedora hardening flags and > getting them right for OCaml code: > > https://github.com/ocaml/ocaml/issues/8648 I should have been more specific so people don't have to search the messages. Here are some questions: (1) Should we add annotations to assembler (*.S) files? (2) If (1), then what annotations precisely should we add and how? (3) We're still seeing "gaps" in hardening on built binaries (but not in Fedora builds for some reason), how can we find out where they are? (4) (Big ask) What do we need to do to enable cf-protection in the compiler? Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages. http://libguestfs.org _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
