Hi, If one builds Xorg it's build with only partial RELRO enabled (test e.g. with checksec.sh). This is caused by the xorg-2.eclass and affects seemingly all packages that use that eclass (It has a conditional that checks if hardened is used and filters some flags). Does anyone know why this is the case? Is it a legacy issue or are there valid reasons why Xorg is build with only partial RELRO? I've tried to build it on my systems with full RELRO (by adding -z,relro,-z,now to the filter inside the eclass) and it works without issues so far.
WKR Hinnerk
signature.asc
Description: Digital signature
