Red Hat Bugzilla – Bug 1283951
no hardening build on F23
Last modified: 2015-11-20 06:38:08 EST
Xorg 32117 Partial RELRO Canary found NX enabled No PIE
since it is long running and runs mostly as root even before F23 the packaging guidelines where pretty clear that the package MUST be hardened
<sigh> If you would have taken 10 seconds of your time to look at:
You would have seen the following there:
# X.org requires lazy relocations to work.
Due to way how xorg loads video and input drivers (and other modules) It can NOT be build hardened.
Fixing this is very hard, and would break compatiblity with e.g. the nvidia binary driver.
FULL RELRO is one topic
PIE is a completly different one