Re: [HEADS UP] libtool + %global _hardened_build 1 = no full hardening

2013-06-26 Thread Paolo Bonzini
Il 26/06/2013 17:39, Björn Esser ha scritto: > # dirty hack to force immediate binding with hardenend build having > # autocrap's libtool pass the need gcc-specs to linker. > sed -i -e 's! \\\$compiler_flags !&\\\$CFLAGS \\\$LDFLAGS !' libtool Weird, I didn't see any mention of this on the autocra

Re: [HEADS UP] libtool + %global _hardened_build 1 = no full hardening

2013-06-26 Thread Richard W.M. Jones
These m4 scripts (used by libvirt) may also be of interest to upstream developers: http://libvirt.org/git/?p=libvirt.git;a=blob;f=m4/virt-compile-pie.m4;hb=HEAD http://libvirt.org/git/?p=libvirt.git;a=blob;f=m4/virt-linker-relro.m4;hb=HEAD Rich. -- Richard Jones, Virtualization Group, Red Hat h

[HEADS UP] libtool + %global _hardened_build 1 = no full hardening

2013-06-26 Thread Björn Esser
Hello list! As discussed a few days ago [1] there's a _severe_ bug in autotool's libtool known for ages [2] preventing libs not to be build fully hardened (partial RELRO), even if you have included `%global _hardened_build 1` into you rpm-spec. There was some LDFLAGS-hack [3] mentioned by me duri