Bug 2040340

Summary: [rpminspect] ttembed is not PIE
Product: Red Hat Enterprise Linux 9 Reporter: Thomas Woerner <twoerner>
Component: ttembedAssignee: Thomas Woerner <twoerner>
Status: CLOSED CURRENTRELEASE QA Contact: Kaleem <ksiddiqu>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0CC: frenaud, myusuf, ssidhaye
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ttembed-1.1-18.el9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-06-27 06:53:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Thomas Woerner 2022-01-13 13:58:16 UTC
Description of problem:
The build of ttembed is done without enabling the build flags. Therefore ttembed is not PIE.

Version-Release number of selected component (if applicable):
ttembed-1.1-17.el9

Additional info:
The solution is to add %set_build_flags to %build in the spec file.

Comment 1 Thomas Woerner 2022-01-13 14:22:25 UTC
To verify use annocheck on the ttembed binary.

Comment 6 Sumedh Sidhaye 2022-02-07 13:14:01 UTC
[root@ci-vm-10-0-137-8 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.0 Beta (Plow)
[root@ci-vm-10-0-137-8 ~]# dnf list ttembed
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:09:05 ago on Mon 07 Feb 2022 07:58:36 AM EST.
Error: No matching Packages to list


[root@ci-vm-10-0-137-8 ~]# dnf install http://<repo srv>/brewroot/vol/rhel-9/packages/ttembed/1.1/18.el9/x86_64/ttembed-1.1-18.el9.x86_64.rpm
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:09:21 ago on Mon 07 Feb 2022 07:58:36 AM EST.
ttembed-1.1-18.el9.x86_64.rpm                                                                                                                208 kB/s |  15 kB     00:00    
Dependencies resolved.
=============================================================================================================================================================================
 Package                                Architecture                          Version                                      Repository                                   Size
=============================================================================================================================================================================
Installing:
 ttembed                                x86_64                                1.1-18.el9                                   @commandline                                 15 k

Transaction Summary
=============================================================================================================================================================================
Install  1 Package

Total size: 15 k
Installed size: 20 k
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                     1/1 
  Installing       : ttembed-1.1-18.el9.x86_64                                                                                                                           1/1 
  Running scriptlet: ttembed-1.1-18.el9.x86_64                                                                                                                           1/1 
  Verifying        : ttembed-1.1-18.el9.x86_64                                                                                                                           1/1 
Installed products updated.

Installed:
  ttembed-1.1-18.el9.x86_64                                                                                                                                                  

Complete!
[root@ci-vm-10-0-137-8 ~]# dnf install annobin-annocheck
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:09:33 ago on Mon 07 Feb 2022 07:58:36 AM EST.
Dependencies resolved.
=============================================================================================================================================================================
 Package                                    Architecture                    Version                                 Repository                                          Size
=============================================================================================================================================================================
Installing:
 annobin-annocheck                          x86_64                          10.53-1.el9                             RHEL-9.0.0-AppStream-rpms                          158 k

Transaction Summary
=============================================================================================================================================================================
Install  1 Package

Total download size: 158 k
Installed size: 382 k
Is this ok [y/N]: y
Downloading Packages:
annobin-annocheck-10.53-1.el9.x86_64.rpm                                                                                                     1.0 MB/s | 158 kB     00:00    
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                        1.0 MB/s | 158 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                     1/1 
  Installing       : annobin-annocheck-10.53-1.el9.x86_64                                                                                                                1/1 
  Running scriptlet: annobin-annocheck-10.53-1.el9.x86_64                                                                                                                1/1 
  Verifying        : annobin-annocheck-10.53-1.el9.x86_64                                                                                                                1/1 
Installed products updated.

Installed:
  annobin-annocheck-10.53-1.el9.x86_64                                                                                                                                       

Complete!
[root@ci-vm-10-0-137-8 ~]# which ttembed; annocheck /usr/bin/ttembed
/usr/bin/ttembed
annocheck: Version 10.53.
Hardened: ttembed: PASS.
[root@ci-vm-10-0-137-8 ~]# 

Based on above observations marking Bugzilla verified.