[Fedora-i18n-bugs] [Bug 955276] New: groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

            Bug ID: 955276
           Summary: groonga package should be built with PIE flags
           Product: Fedora
           Version: 19
         Component: groonga
          Severity: unspecified
          Priority: unspecified
          Assignee: dueno(a)redhat.com
          Reporter: dkholia(a)redhat.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: dueno(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org,
                    kenhys(a)gmail.com
          Category: ---


Description of problem:

http://fedoraproject.org/wiki/Packaging:Guidelines#PIE says that "you MUST
enable the PIE compiler flags if your package is long running ...".

However, currently groonga is not being built with PIE flags. This is a
clear violation of the packaging guidelines.

This issue (in its wider scope) is being discussed at,

https://fedorahosted.org/fesco/ticket/1104

https://lists.fedoraproject.org/pipermail/devel/2013-March/180827.html

Version-Release number of selected component (if applicable):

groonga-httpd-3.0.2-1.fc19.x86_64.rpm

How reproducible:

You can use following programs to check if a package is hardened:

http://people.redhat.com/sgrubb/files/rpm-chksec

OR

https://github.com/kholia/checksec

Steps to Reproduce:

Get scanner.py from https://github.com/kholia/checksec

$ ./scanner.py groonga-httpd-3.0.2-1.fc19.x86_64.rpm
groonga-httpd,groonga-httpd-3.0.2-1.fc19.x86_64.rpm,/usr/sbin/groonga-httpd,NX=Enabled,CANARY=Enabled,RELRO=Partial,PIE=Disabled,RPATH=Disabled,RUNPATH=Disabled,FORTIFY=Enabled,CATEGORY=network-ip

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=uBvDYOaYC2&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

--- Comment #1 from HAYASHI Kentaro <kenhys(a)gmail.com&gt; ---
Thank you for reporting.

The groonga project will release groonga 3.0.3 at the end of this month.

So, I'll fix at that time.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=oi25cJhjhO&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |MODIFIED

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=LzDQZJ7AtA&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
groonga-3.0.3-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/FEDORA-2013-6706/groonga-3.0.3-1....

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=yGEl6GSMjY&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

Daiki Ueno <dueno(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|dueno(a)redhat.com            |kenhys(a)gmail.com

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=9uh2CRDgPp&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

--- Comment #3 from HAYASHI Kentaro <kenhys(a)gmail.com&gt; ---
This issue was fixed at 3.0.3 release version.

$ python ~/work/checksec/scanner.py groonga-3.0.3-1.fc19.x86_64.rpm 
Analyzing groonga-3.0.3-1.fc19.x86_64.rpm ...
groonga,groonga-3.0.3-1.fc19.x86_64.rpm,/usr/bin/groonga,NX=Enabled,CANARY=Enabled,RELRO=Enabled,PIE=Enabled,RPATH=Disabled,RUNPATH=Disabled,FORTIFY=Enabled,CATEGORY=network-ip
groonga,groonga-3.0.3-1.fc19.x86_64.rpm,/usr/bin/groonga-benchmark,NX=Enabled,CANARY=Enabled,RELRO=Enabled,PIE=Enabled,RPATH=Disabled,RUNPATH=Disabled,FORTIFY=Enabled,CATEGORY=network-ip
$ python ~/work/checksec/scanner.py groonga-httpd-3.0.3-1.fc19.x86_64.rpm 
Analyzing groonga-httpd-3.0.3-1.fc19.x86_64.rpm ...
groonga-httpd,groonga-httpd-3.0.3-1.fc19.x86_64.rpm,/usr/sbin/groonga-httpd,NX=Enabled,CANARY=Enabled,RELRO=Enabled,PIE=Enabled,RPATH=Disabled,RUNPATH=Disabled,FORTIFY=Enabled,CATEGORY=network-ip
[kenhys@fedora18-amd64 tmp]$

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=bvmGZ7OCVp&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |CLOSED
         Resolution|---                         |ERRATA
        Last Closed|                            |2013-05-02 22:44:17

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=352oQCpdXT&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
groonga-3.0.3-1.fc19 has been pushed to the Fedora 19 stable repository.  If
problems still persist, please make note of it in this bug report.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=0Q1W19LTOl&a=cc_unsubscribe

[Fedora-i18n-bugs] [Bug 955276] groonga package should be built with PIE flags

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=955276

--- Comment #5 from Dhiru Kholia <dkholia(a)redhat.com&gt; ---
Fix confirmed. Thanks for using scanner.py :-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=39gHZLoOb3&a=cc_unsubscribe