----- Original Message ----- > From: "Moez Roy" <[email protected]> > To: "Development discussions related to Fedora" > <[email protected]> > Cc: "David Airlie" <[email protected]>, "Adam Jackson" <[email protected]>, > "Till Maas" <[email protected]> > Sent: Monday, 2 March, 2015 1:15:19 PM > Subject: Re: hardening breaks X.org > > On Sun, Mar 1, 2015 at 5:16 PM, David Airlie <[email protected]> wrote: > > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > > > Thanks guys, my system is more secure, but I can't run any apps. > > > > Anyways enough snark from me, the problem seems to be that hardening > > makes bind now override RTLD_LAZY options, and the X server relies > > on the RTLD_LAZY on its drivers being lazy. > > > > So should I > > > > a) turn off hardened builds for all Xorg server/driver packages? > > > > b) or is there a way to get partial relro back? > > > > Dave. > > -- > > devel mailing list > > [email protected] > > https://admin.fedoraproject.org/mailman/listinfo/devel > > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > > In RHEL 7.1 beta I see in the changelog: > > 2014-09-17 Adam Jackson <[email protected]> 1.15.0-27 > - Link Xorg as a PIE > > and > > 2014-02-25 Adam Jackson <[email protected]> 1.15.0-6 > - Fix dist tag > - Link Xorg with -z now > >
This works fine for the X server itself, since its not a shared library. However the drivers can't use -z now, that new flags forced this on everywhere. Dave. -- devel mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
