Project

General

Profile

Actions
Copy link

Bug #6497

closed

Cfengine binaries should be compiled with Full RELRO and PIE flags

Bug #6497: Cfengine binaries should be compiled with Full RELRO and PIE flags

Added by Olivier Mauras almost 11 years ago. Updated about 10 years ago.

Status:
Rejected
Priority:
1 (highest)
Assignee:
Matthieu CERDA
Category:
Packaging
Target version:
3.0.12
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Full RELRO and PIE are the most basic protections that should be always enabled

Related issues 1 (0 open — 1 closed)

Is duplicate of Rudder - Bug #7257: Rudder agent doesn't build with hardening flagsReleasedMatthieu CERDAActions

Updated by Vincent MEMBRÉ almost 11 years ago Actions
Copy link
 #1

  • Target version changed from 3.0.4 to 3.0.5

Updated by François ARMAND almost 11 years ago Actions
Copy link
 #2

Mathhieu, I think I'm not even knowing what the request is about1. Could you qualify a little the need ?

[1] just kidding, but still, I really prefer that someone else look at that :)

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #3

  • Target version changed from 3.0.5 to 3.0.6

Updated by Matthieu CERDA over 10 years ago Actions
Copy link
 #4

The idea here is to add security options like https://wiki.ubuntu.com/Security/Features#relro and Position Independent Executable to the binaries we compile, especially CFEngine.

That is a good idea, we should quickly test if it is OK to add on all the architectures we support.

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #5

  • Target version changed from 3.0.6 to 3.0.7

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #6

  • Target version changed from 3.0.7 to 3.0.8

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #7

  • Target version changed from 3.0.8 to 3.0.9

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #8

  • Target version changed from 3.0.9 to 3.0.10

Updated by Vincent MEMBRÉ over 10 years ago Actions
Copy link
 #9

  • Target version changed from 3.0.10 to 3.0.11

Updated by Vincent MEMBRÉ about 10 years ago Actions
Copy link
 #10

  • Target version changed from 3.0.11 to 3.0.12

Updated by Matthieu CERDA about 10 years ago Actions
Copy link
 #11

  • Status changed from New to Rejected

Rejected as a dupe of #7257

Updated by Matthieu CERDA about 10 years ago Actions
Copy link
 #12

  • Is duplicate of Bug #7257: Rudder agent doesn't build with hardening flags added
Actions
Copy link

Also available in: PDF Atom