Bug 2159831

Summary: os-prober: annocheck failure (missing flags)
Product: [Fedora] Fedora Reporter: Robbie Harwood <rharwood>
Component: os-proberAssignee: Hedayat Vatankhah <hedayatv>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 38CC: agk, bootloader-eng-team, hedayatv, jpazdziora, nickc, qe-baseos-daemons, rharwood
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: https://src.fedoraproject.org/rpms/os-prober/pull-request/1
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2144572 Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2144572    
Bug Blocks:    

Description Robbie Harwood 2023-01-10 21:54:19 UTC
+++ This bug was initially created as a clone of Bug #2144572 +++

Basically, this:

[root@localhost ~]# annocheck /usr/libexec/os-prober/newns
annocheck: Version 10.98.
Hardened: newns: FAIL: glibcxx-assertions test because compiled without -D_GLIBCXX_ASSERTIONS 
Hardened: newns: FAIL: cf-protection test because no protection enabled 
Hardened: newns: FAIL: fortify test because no indication that the necessary option was used (and a C compiler was detected) 
Hardened: newns: FAIL: property-note test because a property note was found but it shows that cf-protection is not enabled 
Hardened: Rerun annocheck with --verbose to see more information on the tests.
Hardened: newns: Overall: FAIL.
[root@localhost ~]# 

Ideally it would pass.  I believe this is fixed by https://src.fedoraproject.org/rpms/os-prober/pull-request/1

Comment 1 Ben Cotton 2023-02-07 15:05:06 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 38 development cycle.
Changing version to 38.