Description of problem: According to [1] packages should be hardened. git executables are not, according to checksec: Partial RELRO Canary found NX enabled No PIE No RPATH No RUNPATH /usr/bin/git Partial RELRO Canary found NX enabled No PIE No RPATH No RUNPATH /usr/bin/git-receive-pack Partial RELRO Canary found NX enabled No PIE No RPATH No RUNPATH /usr/bin/git-shell Partial RELRO Canary found NX enabled No PIE No RPATH No RUNPATH /usr/bin/git-upload-archive Partial RELRO Canary found NX enabled No PIE No RPATH No RUNPATH /usr/bin/git-upload-pack Version-Release number of selected component (if applicable): git-2.5.0-3.fc23.x86_64 [1] https://fedoraproject.org//wiki/Changes/Harden_All_Packages
I added 'LDFLAGS = %{__global_ldflags}' to the git config.mak we use for building. That should resolve the issue.
Can you please build F24 packages with these flags too?
Done. Can You test that everything is correct? I must go now, so I will let testing for karma.
git-2.7.4-2.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cb435075f
git-2.7.4-2.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-3cb435075f
git-2.7.4-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.