+++ This bug was initially created as a clone of Bug #2144572 +++ Basically, this: [root@localhost ~]# annocheck /usr/libexec/os-prober/newns annocheck: Version 10.98. Hardened: newns: FAIL: glibcxx-assertions test because compiled without -D_GLIBCXX_ASSERTIONS Hardened: newns: FAIL: cf-protection test because no protection enabled Hardened: newns: FAIL: fortify test because no indication that the necessary option was used (and a C compiler was detected) Hardened: newns: FAIL: property-note test because a property note was found but it shows that cf-protection is not enabled Hardened: Rerun annocheck with --verbose to see more information on the tests. Hardened: newns: Overall: FAIL. [root@localhost ~]# Ideally it would pass. I believe this is fixed by https://src.fedoraproject.org/rpms/os-prober/pull-request/1
This bug appears to have been reported against 'rawhide' during the Fedora Linux 38 development cycle. Changing version to 38.