[releng] Issue #7069: Enable annotaions of binaries compiled by gcc

[Nicholas Clifton]

nickc reported a new issue against the project: `releng` that you are following:
``
I would like to enable binary annotations for files compiled by gcc.  This will allow
extra information to be stored in these files, such as which hardening options were used,
the stack size requirements, potential ABI conflicts and so on.

In order to do this I propose patching the redhat-rpm-config rpm to enable the use of the
annobin plugin.  This plugin will add the extra information to the binary files.  Some
example scripts in the annobin package demonstrate how this information might be used.

This change has several possible consequences for release engineering:

  * It might break the building of any package that uses gcc.
     [I have tried to test building various packages locally, and these have all
succeeded,
    but I do not have the equivalent of an entire Fedora build system].

  * The size of gcc built binaries will increase.  Not by a huge amount I hope, since
     the annotation format is designed to be compact, but it could still be a factor. 
Note
    the information is stored in an unallocated section in the binary, so it will not
affect
    the size of the executable in memory, only on disk.

  * if the annotations work it should allow releng the opportunity to add extra checks 
    for ABI incompatibilities and hardening problems.
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069

[Igor Gnatenko]

ignatenkobrain added a new comment to an issue you are following:
``
I miss link to Change Proposal..
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069

[Nicholas Clifton]

nickc added a new comment to an issue you are following:
``
Well yes - this is my first attempt at this, and I am not sure that I have
created/uploaded the wiki page correctly.  This is the upload link:

https://fedoraproject.org/w/uploads/3/38/Annobin.wiki

But if I understand correctly this should be converted into a proper wiki page somehow,
and once I find out the URL for that, I will update this issue
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069

[Nicholas Clifton]

nickc added a new comment to an issue you are following:
``
Ha!  I have now been told that pages are not uploaded, they are just created out of thin
air.  I had no idea that you could do this.  So here is the URL:

https://fedoraproject.org/wiki/Changes/Annobin
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069

[Dennis Gilmore]

ausil added a new comment to an issue you are following:
``
@adamwill @tflink Is there someone on the QA side of the fence that could help @nickc with
getting tests together based on the extra data here?
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069

[Dennis Gilmore]

The issue: `Enable annotaions of binaries compiled by gcc` of project: `releng` has been
assigned to `ausil` by ausil.

https://pagure.io/releng/issue/7069

[Dennis Gilmore]

The status of the issue: `Enable annotaions of binaries compiled by gcc` of project:
`releng` has been updated to: Closed as Fixed by ausil.

https://pagure.io/releng/issue/7069

[Dennis Gilmore]

ausil added a new comment to an issue you are following:
``
We believe this has all been done.
``

To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/7069