reopen 667957 thanks Dear Maintainer,
The LDFLAGS hardening flags for /usr/lib/libruby1.8.so.1.8.7 are
missing because the build system ignores them.
The attached patch fixes the issue, if possible it should be sent
to upstream.
To check if all flags were correctly enabled you can use
`hardening-check` from the hardening-includes package and check
the build log (for example with blhc [1]) (hardening-check
doesn't catch everything):
$ hardening-check /usr/lib/libruby1.8.so.1.8.7 ...
/usr/lib/libruby1.8.so.1.8.7:
Position Independent Executable: no, regular shared library (ignored)
Stack protected: yes
Fortify Source functions: yes (some protected functions found)
Read-only relocations: yes
Immediate binding: no not found!
...
Regards,
Simon
[1]: http://ruderich.org/simon/blhc/
--
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
Description: Use LDFLAGS from environment (dpkg-buildflags). Necessary for hardening flags. Author: Simon Ruderich <si...@ruderich.org> Last-Update: 2012-04-22 --- ruby1.8-1.8.7.358.orig/Makefile.in +++ ruby1.8-1.8.7.358/Makefile.in @@ -46,7 +46,7 @@ EXTLIBS = LIBS = @LIBS@ $(EXTLIBS) MISSING = @LIBOBJS@ @ALLOCA@ LDSHARED = @LIBRUBY_LDSHARED@ -DLDFLAGS = @LIBRUBY_DLDFLAGS@ $(EXTLDFLAGS) @ARCH_FLAG@ +DLDFLAGS = @LDFLAGS@ @LIBRUBY_DLDFLAGS@ $(EXTLDFLAGS) @ARCH_FLAG@ SOLIBS = @SOLIBS@ MAINLIBS = @MAINLIBS@ MINIOBJS = @MINIOBJS@
signature.asc
Description: Digital signature
