[Fedora-packaging] RFC mass bug reporting: checksec failures

[Richard W.M. Jones]

On Thu, Sep 17, 2015 at 02:03:51PM +0300, Alexander Todorov wrote:
> На 17.09.2015 в 12:26, Richard W.M. Jones написа:
> >>As far as I can see most of them report "Partial RELRO" which may
> >>well be fixed as you propose below. If not I can easily exclude
> >>them.
> >
> >They're intermediate files used by developers.  They aren't runnable
> >binaries.  I think everything in %{libdir}/ocaml should be ignored.
> >
> 
> 
> I see .o files, .so files and some .cmxs ones. Should all of them be ignored then ?

Yes.  Everything under here is for developers.  The .so files would
only be run under the bytecode interpreter, and Fedora only builds
those for the benefit of developers.

All Fedora-shipped OCaml applications should use native code, and go
in /usr/bin.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-p2v converts physical machines to virtual machines.  Boot with a
live CD or over the network (PXE) and turn machines into KVM guests.
http://libguestfs.org/virt-v2v