[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Need help to fix hardening-no-relro and hardening-no-relro



Okay, confirmed, solved the hardening-no-relro,
and Now I can see I make a mistake on subject,
It was to be hardening-no-relro and hardening-no-fortify-functions.

On Tue, Aug 11, 2015 at 11:50 AM, lucas castro <lucascastroborges@gmail.com> wrote:
I'll do that, and send to mentors.

On Tue, Aug 11, 2015 at 11:48 AM, Gianfranco Costamagna <costamagnagianfranco@yahoo.it> wrote:
Yes, this is true.

The problem is that the FTBFS is due to security flags, so it might be good
to solve it anyway.

However, commenting out LDFLAGS from Makefile.in should solve the issue.

BTW that "-s" on the LDFLAGS shouldn't be there, it was a packaging problem
fixed -6 upload and reintroduced in the version on mentors.

Lucas can you please comment that line?

thanks!

Gianfranco





Il Martedì 11 Agosto 2015 16:40, Alex Vong <alexvong1995@gmail.com> ha scritto:
Hi Lucas,

I am new in packaging. `hardening-no-relro' also happens to me. It
turns out it is caused by the missing `-Wl,-z,relro' LDFLAGS. Maybe
overriding CFLAGS and CPPFLAGS but not LDFLAGS will solve FTBFS.

For example in debian/rules,

CFLAGS = '-Ofoo'
CPPFLAGS = '-Dfoo'
LDFLAGS += '-lfoo'

override_dh_auto_configure:
    dh_auto_configure -- --enable-foo

Cheers,
Alex


2015-08-11 21:05 GMT+08:00, lucas castro <lucascastroborges@gmail.com>:
> Gianfranco,
> No problem about about that on irc.
> I think I should take a time on another package, then mailed here.
> and if anyone know about this, it's fine. I really spent much time on this
> package,
> and learned a lot with it.
>
> On Tue, Aug 11, 2015 at 9:49 AM, Gianfranco Costamagna <
> costamagnagianfranco@yahoo.it> wrote:
>
>> Hi Lucas
>> (sorry for not answering on irc, I was AFK)
>>
>> hardening-check debian/xmbmon/usr/bin/xmbmon
>>
>>
>> d/rules:
>> override_dh_auto_build:
>> $(MAKE) CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" CXXFLAGS="$(CXXFLAGS)"
>> LDFLAGS="$(LDFLAGS)"
>>
>>
>>
>> something like this seems to make autoconf aware of the flags (not sure
>> if
>> there is a
>> better way, and for sure you do not need them all).
>>
>> However with hardening stuff enabled now it FTBFS:
>>
>> gcc -g -O2 -fPIE -fstack-protector-strong -Wformat
>> -Werror=format-security
>> -Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -o mbmon
>> mbmon.c getMBinfo.o tyan_tiger.o pci_pm.o sensors.o getMB-via.o
>> getMB-smb.o
>> getMB-isa.o smbuses.o smbus_piix4.o smbus_amd.o smbus_ali.o smbus_amd8.o
>> sens_winbond.o sens_via686.o sens_it87.o sens_gl52.o sens_lm85.o
>> sens_lm80.o sens_lm90.o sens_lm75.o sens_wl784.o smb_extemp.o -lm
>> mbmon.c: In function ‘uptime’:
>> mbmon.c:122:11: error: ‘KERN_BOOTTIME’ undeclared (first use in this
>> function)
>> mib[1] = KERN_BOOTTIME;
>> ^
>>
>>
>> cheers,
>>
>> Gianfranco
>>
>
>
>
> --
> contatos:
> Celular: ( 99 ) 9143-5954 - Vivo
> skype: lucasd3castro
> msn: lucascastroborges@hotmail.com
>


--
To UNSUBSCRIBE, email to debian-mentors-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: [🔎] CADrxHD_sW9Hf1c==-UHsa1ks6iAY5zrFeW7aQeOY3frbd-4d9A@mail.gmail.com" rel="noreferrer" target="_blank">https://lists.debian.org/[🔎] CADrxHD_sW9Hf1c==-UHsa1ks6iAY5zrFeW7aQeOY3frbd-4d9A@mail.gmail.com



--
contatos:
Celular: ( 99 ) 9143-5954 - Vivo
skype: lucasd3castro
msn: lucascastroborges@hotmail.com



--
contatos:
Celular: ( 99 ) 9143-5954 - Vivo
skype: lucasd3castro
msn: lucascastroborges@hotmail.com

Reply to: