Bug 972970 - "Partial RELRO" not detected
"Partial RELRO" not detected
Product: Fedora
Classification: Fedora
Component: hardening-check (Show other bugs)
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Björn 'besser82' Esser
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2013-06-10 19:59 EDT by Harald Reindl
Modified: 2013-06-11 18:26 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2013-06-11 02:18:06 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
archive with screenshot and two hardening-checkers (55.14 KB, application/octet-stream)
2013-06-10 19:59 EDT, Harald Reindl
no flags Details

  None (edit)
Description Harald Reindl 2013-06-10 19:59:39 EDT
Created attachment 759390 [details]
archive with screenshot and two hardening-checkers

first thank you for the fedora-package

what i am missing is "Partial RELRO" which is detected by a perl script found the last days and actually i was able to change the output of some private packages from "Partial RELRO" to a green "Full RELRO"

attached a screnshot and both of my script called by "hardening-check.sh" to see the difference - the perl script seem to do a better job here and maybe something could be patched into "hardening-check" - the colored output would also be nice :-)
Comment 1 Björn 'besser82' Esser 2013-06-11 02:18:06 EDT
Thanks for your bug-report, in return. :)

The "Partial RELRO" issued by check-security.sh, is perfectly the same as hardening-check reporting: "RELRO: yes, Immediate Binding: no".  See [1] for further reference.

For colored output you can use --color switch.  More options are described in hardening-check's manpage and/or --help output.

I'll close here --> NOTABUG

[1] http://tk-blog.blogspot.de/2009/02/relro-not-so-well-known-memory.html
Comment 2 Harald Reindl 2013-06-11 18:26:24 EDT
got it - thank you

well, looks like you packacged "checksec" too - fine :-)

[harry@srv-rhsoft:~]$ cat /usr/local/bin/hardening-check 
/usr/bin/hardening-check --color $1
echo ""
/usr/bin/checksec --file $1

Note You need to log in before you can comment on or make changes to this bug.