Description of problem: Setuid programs should have full RELRO support enabled for extra protection. FILE TYPE RELRO PIE /sbin/pam_timestamp_check setuid partial yes /sbin/unix_chkpwd setuid partial yes You can use this test program for testing: http://people.redhat.com/sgrubb/files/rpm-chksec