* Gordon Messmer: > A number of Fedora packages have adopted a GOT audit test that I wrote > after the xz-utils attack. It looks for signs of ELF namespace > tampering in running processes. I'd like to propose that Fedora deploy > it as a generic test. > > I talked to Cristian about that in the CI channel in June, and he said > "it's fine from Fedora-CI technical perspective but needs more > discussion on the layer deeper down". Cristian asked Maxwell G to > review the test, and Maxwell suggested that we discuss it here when I > followed up with him. > > https://codeberg.org/gordonmessmer/got-audit-pipeline > https://codeberg.org/gordonmessmer/got-audit
Does this light up on Red Hat's build of Fedora? It has heavy run-time patching of libc.so.6, apparently. Thanks, Florian -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
