Project

General

Profile

Actions

Bug #6497

closed

Cfengine binaries should be compiled with Full RELRO and PIE flags

Added by Olivier Mauras over 7 years ago. Updated about 7 years ago.

Status:
Rejected
Priority:
1
Assignee:
Matthieu CERDA
Category:
Packaging
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Regression:

Description

Full RELRO and PIE are the most basic protections that should be always enabled


Related issues 1 (0 open1 closed)

Is duplicate of Rudder - Bug #7257: Rudder agent doesn't build with hardening flagsReleasedMatthieu CERDA2015-10-09Actions
Actions #1

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 3.0.4 to 3.0.5
Actions #2

Updated by François ARMAND over 7 years ago

Mathhieu, I think I'm not even knowing what the request is about1. Could you qualify a little the need ?

[1] just kidding, but still, I really prefer that someone else look at that :)

Actions #3

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 3.0.5 to 3.0.6
Actions #4

Updated by Matthieu CERDA over 7 years ago

The idea here is to add security options like https://wiki.ubuntu.com/Security/Features#relro and Position Independent Executable to the binaries we compile, especially CFEngine.

That is a good idea, we should quickly test if it is OK to add on all the architectures we support.

Actions #5

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 3.0.6 to 3.0.7
Actions #6

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 3.0.7 to 3.0.8
Actions #7

Updated by Vincent MEMBRÉ over 7 years ago

  • Target version changed from 3.0.8 to 3.0.9
Actions #8

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 3.0.9 to 3.0.10
Actions #9

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 3.0.10 to 3.0.11
Actions #10

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 3.0.11 to 3.0.12
Actions #11

Updated by Matthieu CERDA about 7 years ago

  • Status changed from New to Rejected

Rejected as a dupe of #7257

Actions #12

Updated by Matthieu CERDA about 7 years ago

  • Is duplicate of Bug #7257: Rudder agent doesn't build with hardening flags added
Actions

Also available in: Atom PDF