Bug 1218034 - Firefox needs to be built with ASLR & FULL RELRO
Summary: Firefox needs to be built with ASLR & FULL RELRO
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Martin Stransky
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: harden-failure
TreeView+ depends on / blocked
 
Reported: 2015-05-04 05:09 UTC by Moez Roy
Modified: 2015-05-24 03:44 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-05-24 03:44:15 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
spec file patch (1.42 KB, patch)
2015-05-04 05:11 UTC, Moez Roy 		no flags Details | Diff
updated patch file for spec changes (1.54 KB, patch)
2015-05-10 06:03 UTC, Moez Roy 		no flags Details | Diff
Show Obsolete (1) View All

Description Moez Roy 2015-05-04 05:09:47 UTC 
Firefox needs to be built with ASLR & FULL RELRO.

The default hardened build specs went into effect on Feb 19th for rawhide.

I don't know why the Firefox build tool is ignoring the hardened LD
flags which enable pie and -z now.
Comment 1 Moez Roy 2015-05-04 05:11:46 UTC 
Created attachment 1021520 [details]
spec file patch

See attached spec file patch which solves this.
Comment 2 Moez Roy 2015-05-10 06:03:38 UTC 
Created attachment 1023934 [details]
updated patch file for spec changes
Comment 3 Moez Roy 2015-05-10 08:58:17 UTC 
Scratch Builds:

F23: https://koji.fedoraproject.org/koji/taskinfo?taskID=9699011

F22: https://koji.fedoraproject.org/koji/taskinfo?taskID=9699025

F21: https://koji.fedoraproject.org/koji/taskinfo?taskID=9699029

F20: https://koji.fedoraproject.org/koji/taskinfo?taskID=9699033
Note You need to log in before you can comment on or make changes to this bug.