severity 661393 serious
thanks
* Miguel Colon <[email protected]>, 2012-02-26, 17:15:
The last release enabled hardening but caused the following errors in amd64:
/usr/bin/ld: keyctl.o: relocation R_X86_64_32S against `commands' can
not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: request-key.o: relocation R_X86_64_32 against `.rodata'
can not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: key.dns_resolver.o: relocation R_X86_64_32 against
`.rodata' can not be used when making a shared object; recompile with
-fPIC
[...]
--- keyutils-1.5.5.orig/Makefile
+++ keyutils-1.5.5/Makefile
@@ -127,7 +127,7 @@ keyutils.os: keyutils.c keyutils.h Makef
#
###############################################################################
%.o: %.c keyutils.h Makefile
- $(CC) $(CPPFLAGS) $(CFLAGS) -o $@ -c $<
+ $(CC) $(CPPFLAGS) $(CFLAGS) -fPIC -o $@ -c $<
keyctl: keyctl.o $(DEVELLIB)
$(CC) -L. $(CFLAGS) $(LDFLAGS) $(RPATH) -o $@ $< -lkeyutils
The correct fix would be to make the makefile respect CFLAGS set from
environment, which already include -fPIE (not -fPIC).
--
Jakub Wilk
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
