Description of problem: The build of ttembed is done without enabling the build flags. Therefore ttembed is not PIE. Version-Release number of selected component (if applicable): ttembed-1.1-17.el9 Additional info: The solution is to add %set_build_flags to %build in the spec file.
To verify use annocheck on the ttembed binary.
[root@ci-vm-10-0-137-8 ~]# cat /etc/redhat-release Red Hat Enterprise Linux release 9.0 Beta (Plow) [root@ci-vm-10-0-137-8 ~]# dnf list ttembed Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use subscription-manager to register. Last metadata expiration check: 0:09:05 ago on Mon 07 Feb 2022 07:58:36 AM EST. Error: No matching Packages to list [root@ci-vm-10-0-137-8 ~]# dnf install http://<repo srv>/brewroot/vol/rhel-9/packages/ttembed/1.1/18.el9/x86_64/ttembed-1.1-18.el9.x86_64.rpm Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use subscription-manager to register. Last metadata expiration check: 0:09:21 ago on Mon 07 Feb 2022 07:58:36 AM EST. ttembed-1.1-18.el9.x86_64.rpm 208 kB/s | 15 kB 00:00 Dependencies resolved. ============================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================= Installing: ttembed x86_64 1.1-18.el9 @commandline 15 k Transaction Summary ============================================================================================================================================================================= Install 1 Package Total size: 15 k Installed size: 20 k Is this ok [y/N]: y Downloading Packages: Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : ttembed-1.1-18.el9.x86_64 1/1 Running scriptlet: ttembed-1.1-18.el9.x86_64 1/1 Verifying : ttembed-1.1-18.el9.x86_64 1/1 Installed products updated. Installed: ttembed-1.1-18.el9.x86_64 Complete! [root@ci-vm-10-0-137-8 ~]# dnf install annobin-annocheck Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use subscription-manager to register. Last metadata expiration check: 0:09:33 ago on Mon 07 Feb 2022 07:58:36 AM EST. Dependencies resolved. ============================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================= Installing: annobin-annocheck x86_64 10.53-1.el9 RHEL-9.0.0-AppStream-rpms 158 k Transaction Summary ============================================================================================================================================================================= Install 1 Package Total download size: 158 k Installed size: 382 k Is this ok [y/N]: y Downloading Packages: annobin-annocheck-10.53-1.el9.x86_64.rpm 1.0 MB/s | 158 kB 00:00 ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 1.0 MB/s | 158 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : annobin-annocheck-10.53-1.el9.x86_64 1/1 Running scriptlet: annobin-annocheck-10.53-1.el9.x86_64 1/1 Verifying : annobin-annocheck-10.53-1.el9.x86_64 1/1 Installed products updated. Installed: annobin-annocheck-10.53-1.el9.x86_64 Complete! [root@ci-vm-10-0-137-8 ~]# which ttembed; annocheck /usr/bin/ttembed /usr/bin/ttembed annocheck: Version 10.53. Hardened: ttembed: PASS. [root@ci-vm-10-0-137-8 ~]# Based on above observations marking Bugzilla verified.