Bug 853178 - setuid/gid programs should have full RELRO
Summary: setuid/gid programs should have full RELRO
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: initscripts
Version: 18
Hardware: Unspecified
OS: Unspecified
high
unspecified
Target Milestone: ---
Assignee: Lukáš Nykrýn
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 853068
TreeView+ depends on / blocked
 
Reported: 2012-08-30 16:37 UTC by Steve Grubb
Modified: 2013-03-15 14:41 UTC (History)
6 users (show)

Fixed In Version: initscripts-9.45-1.fc19
Clone Of:
Environment:
Last Closed: 2013-03-15 14:41:15 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Steve Grubb 2012-08-30 16:37:23 UTC 
Description of problem:
Setuid programs should have full RELRO support enabled for extra protection. Also, setgid programs should be compiled with gcc's PIE flag.

FILE                                                TYPE        RELRO    PIE 
/sbin/netreport                                     setgid      partial  no  
/usr/sbin/usernetctl                                setuid      partial  yes 

You can use this program for testing:
http://people.redhat.com/sgrubb/files/rpm-chksec
Comment 1 Steve Grubb 2013-03-07 16:48:22 UTC 
Checking to see if there is any progress on updating the compile flags? We'd like to close this bug if its already done. Thanks.
Comment 2 Lukáš Nykrýn 2013-03-07 17:37:54 UTC 
Fixed in upstream http://git.fedorahosted.org/cgit/initscripts.git/commit/?id=4c13a49abb8a7d8fcf58238b706ff71f1e2d83fc -> post
Note You need to log in before you can comment on or make changes to this bug.