https://bugzilla.redhat.com/show_bug.cgi?id=984185
--- Comment #3 from Marcela Mašláňová <mmaslano(a)redhat.com> ---
I was speaking to the Security team, because I was interested in their point of
view. The common practice until now was "add the full relro to long time
running apps, especially daemons".
In opinion of Security team, languages don't need full relro if they don't
write into pointers like this example:
http://cs.potsdam.edu/cgi-bin/man/man2html?Glib::Object+3
Glib::Object->new_from_pointer
Therefore Perl is a good candidate for full relro. I would like to see analysis
of slowdown of Perl examples and also all major components before we start
changing partial relro into full relro. I'd rather see same approach for whole
distribution than accidentally changing some apps.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=bViOO4fGet&a=cc_unsubscribe