On 03/16/2012 09:51 PM, Cyril Lavier wrote:
On 03/16/2012 09:42 PM, Simon Ruderich wrote:
reopen 664090
thanks
Hello Kartik,
The hardening flags are still missing because you forgot to
commit the patch attached to my original report. The build system
(src/http/modules/perl/Makefile.PL) needs to be patched (just
putting the patch in debian/patches/ and adding the name to
debian/patches/series is enough).
$ hardening-check /usr/lib/perl5/auto/nginx/nginx.so
/usr/lib/perl5/auto/nginx/nginx.so:
Position Independent Executable: no, regular shared library
(ignored)
Stack protected: no, not found!
Fortify Source functions: no, only unprotected functions found!
Read-only relocations: no, not found!
Immediate binding: no not found!
Regards,
Simon
Oh Sorry.
I applied your patch for the debian/rules but I forgot to import the
Makefile.PL patch.
I will perform this in the next days (maybe sunday).
Thanks.
Hi.
I just commited the needed changes.
Here is the output of hardening-check :
root@grunthos:/tmp/nginx-extras/usr/lib/perl5/auto/nginx#
hardening-check nginx.so
nginx.so:
Position Independent Executable: no, regular shared library (ignored)
Stack protected: no, not found!
Fortify Source functions: no, only unprotected functions found!
Read-only relocations: yes
Immediate binding: no not found!
Apparently, it seems good. If you see anything strange, don't hesitate
to answer.
Thanks.
--
Cyril "Davromaniak" Lavier
KeyID 59E9A881
http://www.davromaniak.eu
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
