kexec-tools-2.0.16-4.fc28 builds /sbin/kdump, /sbin/kexec, /sbin/makedumpfile, /sbin/vmcore-dmesg with the full complement of Fedora build flags. This is probably due to %undefine _hardened_build in the RPM spec file. More information about RPM macros to set CFLAGS and LDFLAGS is available here: https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md If these flags insufficient, please let me know. I'll try to add something that fits your use case.
This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'.
I'm not sure how to fix the old bug without the %undefine _hardened_build, seems it is the only way. Appreciated if you have better idea, I'm glad to do some experiment. The original bug is: https://bugzilla.redhat.com/show_bug.cgi?id=1236456
ping?
(In reply to Dave Young from comment #2) > I'm not sure how to fix the old bug without the %undefine _hardened_build, > seems it is the only way. Appreciated if you have better idea, I'm glad to > do some experiment. > > The original bug is: > https://bugzilla.redhat.com/show_bug.cgi?id=1236456 That's why I said everything *except* purgatory. Do you need help with implementing that?
(In reply to Florian Weimer from comment #4) > (In reply to Dave Young from comment #2) > > I'm not sure how to fix the old bug without the %undefine _hardened_build, > > seems it is the only way. Appreciated if you have better idea, I'm glad to > > do some experiment. > > > > The original bug is: > > https://bugzilla.redhat.com/show_bug.cgi?id=1236456 > > That's why I said everything *except* purgatory. Do you need help with > implementing that? Florian, yes, if you can provide a patch, it would be helpful.
Fixed in 2.0.18-5: annocheck kexec-tools-2.0.18-5.fc30.x86_64.rpm Hardened: eppic_makedumpfile.so: PASS. Hardened: makedumpfile: PASS. Hardened: kexec: PASS. Hardened: vmcore-dmesg: PASS.