If an executable is linked with --enable-new-dtags option, the BIND_NOW feature is encoded in a different way. Example: $ readelf -d /usr/bin/rpm | grep NOW 0x0000000000000018 (BIND_NOW) 0x000000006ffffffb (FLAGS_1) Flags: NOW PIE $ readelf -d /usr/bin/perl | grep NOW 0x000000000000001e (FLAGS) BIND_NOW 0x000000006ffffffb (FLAGS_1) Flags: NOW PIE eu-readelf output is similar. rpmgrill does not recognize BIND_NOW in FLAGS section and reports /usr/bin/perl is not full RELRO <https://taskotron.fedoraproject.org/artifacts/all/dc93a916-7698-11e7-9338-5254008e42f6/task_output/rpmgrill.json>. This is a bug in rpmgrill. rpmgrill should support this variant.
Created attachment 1310496 [details] Fix
TIL never use "Raw Unified", because it misses new files from the patch. Sorry... I've botched applying your patch :(
I've merged the fix (also fixed the builds in copr).
This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle. Changing version to '27'.
rpmgrill-0.31-1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-ad93ec88d5
rpmgrill-0.31-1.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-9162792489
rpmgrill-0.31-1.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-16bcdb8114
rpmgrill-0.31-1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-16bcdb8114
rpmgrill-0.31-1.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-9162792489
rpmgrill-0.31-1.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-ad93ec88d5
rpmgrill-0.31-1.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.
rpmgrill-0.31-1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.
rpmgrill-0.31-1.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.