[Bug 971836] New: Review Request: hardening-check - Tool to check ELF for being built hardened

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=971836

            Bug ID: 971836
           Summary: Review Request: hardening-check - Tool to check ELF
                    for being built hardened
           Product: Fedora
           Version: rawhide
         Component: Package Review
          Severity: medium
          Priority: medium
          Assignee: nobody@xxxxxxxxxxxxxxxxx
          Reporter: bjoern.esser@xxxxxxxxx
        QA Contact: extras-qa@xxxxxxxxxxxxxxxxx
                CC: notting@xxxxxxxxxx,
                    package-review@xxxxxxxxxxxxxxxxxxxxxxx

Spec URL:
http://besser82.fedorapeople.org/review/hardening-check/hardening-check.spec
SRPM URL:
http://besser82.fedorapeople.org/review/hardening-check/hardening-check-2.3-1.fc19.src.rpm

Description:
hardening-check is a perl-script to check whether an already compiled ELF was
built using hardening-flags.

It checks, using readelf, for these hardening-characteristics:

  * Position Independent Executable
    (gcc/g++ -fPIE -pie)
  * Stack protected
    (gcc/g++ -D_FORTIFY_SOURCE=2)
  * Fortify Source functions
    (gcc/g++ -fstack-protector --param ssp-buffer-size=4)
  * Read-only relocations
    (ld -z relro)
  * Immediate binding
    (ld -z now)

Fedora Account System Username: besser82

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sjnmQBffRy&a=cc_unsubscribe
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review





[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]