Red Hat Bugzilla – Bug 853178
setuid/gid programs should have full RELRO
Last modified: 2013-03-15 10:41:15 EDT
Description of problem:
Setuid programs should have full RELRO support enabled for extra protection. Also, setgid programs should be compiled with gcc's PIE flag.
FILE TYPE RELRO PIE
/sbin/netreport setgid partial no
/usr/sbin/usernetctl setuid partial yes
You can use this program for testing:
Checking to see if there is any progress on updating the compile flags? We'd like to close this bug if its already done. Thanks.
Fixed in upstream http://git.fedorahosted.org/cgit/initscripts.git/commit/?id=4c13a49abb8a7d8fcf58238b706ff71f1e2d83fc -> post