https://bugzilla.redhat.com/show_bug.cgi?id=1289751
Bug ID: 1289751
Summary: Harden all packages: eclipse binaries are not hardened
Product: Fedora
Version: 23
Component: eclipse
Assignee: akurtako(a)redhat.com
Reporter: rhbz(a)genodeftest.de
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, andjrobins(a)gmail.com,
eclipse-sig(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
mat.booth(a)redhat.com, rgrunber(a)redhat.com
Description of problem:
According to [1] packages should be hardened. eclipse binaries (executables,
libraries) are not, according to checksec:
$ checksec --file /usr/lib64/eclipse/eclipse
RELRO STACK CANARY NX PIE RPATH
RUNPATH FILE
Partial RELRO No canary found NX enabled No PIE No RPATH No
RUNPATH /usr/lib64/eclipse/eclipse
$ checksec --dir
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/
RELRO STACK CANARY NX PIE RPATH
RUNPATH FILE
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-atk-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-awt-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-cairo-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-glx-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-pi3-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-pi-gtk-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-webkit-extension-4528.so
Partial RELRO No canary found NX enabled DSO No RPATH No
RUNPATH
/usr/lib64/eclipse/plugins/org.eclipse.swt.gtk.linux.x86_64_3.104.1.v20151128-1100/libswt-webkit-gtk-4528.so
Version-Release number of selected component (if applicable):
eclipse-platform-4.5.1-5.fc23.x86_64
eclipse-swt-4.5.1-5.fc23.x86_64
Additional info:
[1]
https://fedoraproject.org//wiki/Changes/Harden_All_Packages
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=EjG9663ymV&a=cc_unsubscribe