Re: hardening breaks X.org

2015-04-15 Thread Moez Roy
On Wed, Apr 15, 2015 at 2:08 AM, Baoquan He wrote: > Hi, > > I got this problem too on kexec-tools package building. Linker > asked me to add "-fPIC" and recompile. > > So what is suggested to do? > > Turn it off or just make change as compiler/linker suggested? > > Thanks > Baoquan See: https:/

Re: hardening breaks X.org

2015-04-15 Thread Baoquan He
On 03/01/15 at 08:16pm, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RTLD_LAZY

Re: hardening breaks X.org

2015-03-19 Thread Adam Jackson
On Thu, 2015-03-19 at 11:36 +0100, Florian Weimer wrote: > On 03/02/2015 02:16 AM, David Airlie wrote: > > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > > > Thanks guys, my system is more secure, but I can't run any apps. > > > > Anyways enough snark from me, the p

Re: hardening breaks X.org

2015-03-19 Thread Florian Weimer
On 03/02/2015 02:16 AM, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RTLD_LAZY

Re: hardening breaks X.org

2015-03-05 Thread Till Maas
On Tue, Mar 03, 2015 at 12:04:50PM +, Sérgio Basto wrote: > > a) turn off hardened builds for all Xorg server/driver packages? > > > > b) or is there a way to get partial relro back? > > In my point of view , first put things working , which is "turn off > hardened" , after try fix the build

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-03 Thread Adam Jackson
On Mon, 2015-03-02 at 15:24 +0800, Christopher Meng wrote: > On 3/2/15, Moez Roy wrote: > > What happens when you use the latest build: > > > > xorg-x11-server-1.17.1-5.fc23 > > > > https://koji.fedoraproject.org/koji/buildinfo?buildID=616980 > > No, int vector is unreadable: > > http://pastebin

Re: hardening breaks X.org

2015-03-03 Thread Reindl Harald
Am 03.03.2015 um 13:04 schrieb Sérgio Basto: On Dom, 2015-03-01 at 20:16 -0500, David Airlie wrote: So the rebuild to use hardened builds by default in rawhide, broke X.org. Thanks guys, my system is more secure, but I can't run any apps. Why we have this demand of security paranoia? why w

Re: hardening breaks X.org

2015-03-03 Thread Sérgio Basto
On Dom, 2015-03-01 at 20:16 -0500, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. Why we have this demand of security paranoia ? > Anyways enough snark from me, the problem seem

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-02 Thread Hans de Goede
Hi, On 02-03-15 12:00, Moez Roy wrote: On Mon, Mar 2, 2015 at 1:30 AM, Christopher Meng wrote: Ok, this time is vesa's problem: http://lists.x.org/archives/xorg/2015-February/057183.html But hardening breaks it indeed. -- Yours sincerely, Christopher Meng http://cicku.me https://bugzill

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-02 Thread Christopher Meng
On 3/2/15, Moez Roy wrote: > https://bugzilla.redhat.com/show_bug.cgi?id=1196676 > > proposed as F22 alpha blocker Thanks, I was about to do that. -- Yours sincerely, Christopher Meng http://cicku.me -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-02 Thread Moez Roy
On Mon, Mar 2, 2015 at 1:30 AM, Christopher Meng wrote: > Ok, this time is vesa's problem: > > http://lists.x.org/archives/xorg/2015-February/057183.html > > But hardening breaks it indeed. > > -- > > Yours sincerely, > Christopher Meng > > http://cicku.me https://bugzilla.redhat.com/show_bug.cgi

Re: hardening breaks X.org

2015-03-02 Thread Peter Robinson
On Mon, Mar 2, 2015 at 1:16 AM, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RT

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-01 Thread Christopher Meng
On 3/2/15, Moez Roy wrote: > What happens when you use the latest build: > > xorg-x11-server-1.17.1-5.fc23 > > https://koji.fedoraproject.org/koji/buildinfo?buildID=616980 No, int vector is unreadable: http://pastebin.com/8pJt0b7W Ajax's commit: http://cgit.freedesktop.org/xorg/xserver/commit/

Re: Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-01 Thread Moez Roy
On Sun, Mar 1, 2015 at 10:31 PM, Christopher Meng wrote: > Hi, > > I encountered this when I distro-synced my f21 non-product to rawhide > and kernel updated to 4.0 in this morning. > > Now no matter which kernel the system runs under, all couldn't start > X, with these in Xorg.0.log: > > Loading

Failed to load vesa with undefined symbol (was: Re: hardening breaks X.org)

2015-03-01 Thread Christopher Meng
Hi, I encountered this when I distro-synced my f21 non-product to rawhide and kernel updated to 4.0 in this morning. Now no matter which kernel the system runs under, all couldn't start X, with these in Xorg.0.log: Loading /usr/lib64/xorg/modules/libvbe.so [99.976] (EE) Failed to load /usr/l

Re: hardening breaks X.org

2015-03-01 Thread David Airlie
- Original Message - > From: "Moez Roy" > To: "Development discussions related to Fedora" > > Cc: "David Airlie" , "Adam Jackson" , > "Till Maas" > Sent: Monday, 2 March, 2015 1:15:19 PM > Subject: Re: hardenin

Re: hardening breaks X.org

2015-03-01 Thread Moez Roy
On Sun, Mar 1, 2015 at 5:16 PM, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RT

Re: hardening breaks X.org

2015-03-01 Thread Christopher Meng
On 3/2/15, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. http://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code: "Fedora users might notice les

hardening breaks X.org

2015-03-01 Thread David Airlie
So the rebuild to use hardened builds by default in rawhide, broke X.org. Thanks guys, my system is more secure, but I can't run any apps. Anyways enough snark from me, the problem seems to be that hardening makes bind now override RTLD_LAZY options, and the X server relies on the RTLD_LAZY on it