1984995 – annobin: annocheck policy adjustments for PAC+BTI revert

Bug 1984995 - annobin: annocheck policy adjustments for PAC+BTI revert

Summary: annobin: annocheck policy adjustments for PAC+BTI revert

Keywords:
Status:	CLOSED CURRENTRELEASE
Alias:	None
Product:	Red Hat Enterprise Linux 9
Classification:	Red Hat
Component:	annobin
Sub Component:
Version:	CentOS Stream
Hardware:	Unspecified
OS:	Unspecified
Priority:	urgent
Severity:	high
Target Milestone:	beta
Target Release:	---
Assignee:	Nick Clifton
QA Contact:	Martin Cermak
Docs Contact:
URL:
Whiteboard:
Depends On:	1984652
Blocks:	1988950
TreeView+	depends on / blocked

Reported:	2021-07-22 15:35 UTC by Florian Weimer
Modified:	2021-12-07 21:23 UTC (History)
CC List:	6 users (show)
Fixed In Version:	annobin-9.83-2.el9
Doc Type:	No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed:	2021-12-07 21:20:54 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Red Hat Issue Tracker	RHELPLAN-90615	0	None	None	None	2021-07-22 15:39:54 UTC

Description Florian Weimer 2021-07-22 15:35:57 UTC

Bug 1984652 reverts PAC+BTI for Red Hat Enterprise Linux 9.

We need to change annocheck reporting so that detected PAC and BTI is treated as a failure, rather than treating missing PAC and BTI as a failure.

There should not be a recommendation that this will be turned on in the future. Package maintainers should not be encouraged to enable either feature ahead of time.

Comment 2 Nick Clifton 2021-07-23 13:44:02 UTC

Fixed in annobin-9.83-1.el9

Comment 3 Florian Weimer 2021-08-02 06:59:06 UTC

annobin-9.83-2.el9 with this change is in gating, via rhel-9.0.0-beta-build-sidetag-86604-stack-gate.

Note You need to log in before you can comment on or make changes to this bug.