Send inn-workers mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.isc.org/mailman/listinfo/inn-workers
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of inn-workers digest..."
Today's Topics:
1. Re: Hardening flags (Julien ?LIE)
2. QIO_BUFFERSIZE (Bo Lindbergh)
----------------------------------------------------------------------
Message: 1
Date: Tue, 1 Dec 2020 22:38:17 +0100
From: Julien ?LIE <[email protected]>
To: [email protected]
Subject: Re: Hardening flags
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8; format=flowed
Hi Russ,
>> I'm also wondering whether a --with-pie configure option wouldn't be
>> useful to have. It would be on by default, and would permit to easily
>> disable a PIE build when needed (for instance in architectures that do
>> not support it correctly).
>
> I have no objections, but we could also wait to see if anyone cares and
> save the maintenance effort if no one asks for it.
:-)
With libperl.a built without -fPIC, linking with -pie fails for innd:
../libtool --mode=link /home/iulius/autobuild/bin/gcc-10.2.0/bin/gcc
-pie -Wl,-z,relro -Wl,-z,now -o innd art.o cc.o chan.o icd.o innd.o
keywords.o lc.o nc.o newsfeeds.o ng.o perl.o proc.o python.o rc.o site.o
status.o util.o wip.o
/home/iulius/autobuild/inn-CURRENT-20201201/storage/libstorage.la
/home/iulius/autobuild/inn-CURRENT-20201201/history/libinnhist.la
/home/iulius/autobuild/inn-CURRENT-20201201/lib/libinn.la -lz
/home/iulius/autobuild/inn-CURRENT-20201201/lib/perl.o -Wl,-E
-fstack-protector-strong -L/usr/local/lib
-L/home/iulius/autobuild/bin/perl-5.32.0/lib/5.32.0/x86_64-linux/CORE
-lperl -lpthread -lnsl -ldl -lm -lcrypt -lutil
libtool: link: /home/iulius/autobuild/bin/gcc-10.2.0/bin/gcc -pie -Wl,-z
-Wl,relro -Wl,-z -Wl,now -o .libs/innd art.o cc.o chan.o icd.o innd.o
keywords.o lc.o nc.o newsfeeds.o ng.o perl.o proc.o python.o rc.o site.o
status.o util.o wip.o
/home/iulius/autobuild/inn-CURRENT-20201201/lib/perl.o -Wl,-E
-fstack-protector-strong
/home/iulius/autobuild/inn-CURRENT-20201201/storage/.libs/libstorage.so
/home/iulius/autobuild/inn-CURRENT-20201201/history/.libs/libinnhist.so
/home/iulius/autobuild/inn-CURRENT-20201201/lib/.libs/libinn.so -lz
-L/usr/local/lib
-L/home/iulius/autobuild/bin/perl-5.32.0/lib/5.32.0/x86_64-linux/CORE
-lperl -lpthread -lnsl -ldl -lm -lcrypt -lutil -Wl,-rpath
-Wl,/usr/local/news/lib
/usr/bin/ld:
/home/iulius/autobuild/bin/perl-5.32.0/lib/5.32.0/x86_64-linux/CORE/libperl.a(op.o):
relocation R_X86_64_32S against `.rodata' can not be used when making a
shared object; recompile with -fPIC
It means that Perl should at least be built with the following flags:
./Configure -des -Accflags=-fPIC
otherwise, building INN with Perl support fails if PIE is enabled...
Same thing for the default build of libpython, but not for others like
libkrb5 or libdb that seem to include -fPIC in their default build options.
Should we care for that?
Notably when the error message asks to recompile Perl with -fPIC whereas
passing --disable-hardening-flags at configure time to INN would do the job.
--
Julien ?LIE
??Boire du caf? emp?che de dormir. Par contre, dormir emp?che de boire
du caf?.?? (Philippe Geluck)
------------------------------
Message: 2
Date: Wed, 2 Dec 2020 09:17:50 +0100
From: Bo Lindbergh <[email protected]>
To: [email protected]
Subject: QIO_BUFFERSIZE
Message-ID: <[email protected]>
Content-Type: text/plain; charset=us-ascii
lib/qio.c contains:
> /* A reasonable default buffer size to use. */
> #define QIO_BUFFERSIZE 8192
I don't think this is reasonable any more, because it limits the maximum
length of an overview line in makehistory, and there are definitely
artic|es in the wild with longer overview data. Having different overview
size limits in innd and makehistory is just wrong.
> $ echo 'group rec.arts.comics.strips
> over 56677' | nc nntp.aioe.org 119
> 200 nntp.aioe.org InterNetNews NNRP server INN 2.5.4 ready (posting ok)
> 211 1224 56506 57729 rec.arts.comics.strips
> 224 Overview information for 56677 follows
> 56677 Re: Family Circus recycling - 2020 thread Jimmy Delach
> <[email protected]> Tue, 7 Jul 2020 21:45:29 -0700 (PDT)
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <[email protected]>
> <8292ae41-eebc-484d-8c07-fba5d1
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<d678894f-b9ae-4e52-b2ba-d58
[email protected]> <2511d998-7a9a-47d8-9fa5-
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]> <6a7d5d39-bdf5-
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]> <a1b
[email protected]> <
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<061db245-b48c-4123-9c94-214b79d0177a@googlegro
ups.com> <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<f677a62a-301d-46cb-95f2-958806a47bf
[email protected]> <dde28d9c-c270-4024-97d1-a915a81e
[email protected]> <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]> <c82156bf-09c1-4f89-8
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<6bc92f7e-31a8-454b-9fe7-d0ab83fa719bo@googlegrou
ps.com> <1966caa1-def9-4297-bd1a-8e93bc28a449o@google
groups.com> <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]> <7ba8fa53-a4ae-47
[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]> 11649 5
Xref: aioe.org rec.arts.comics.strips
:56677
> .
> $
/Bo Lindbergh
------------------------------
Subject: Digest Footer
_______________________________________________
inn-workers mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/inn-workers
------------------------------
End of inn-workers Digest, Vol 126, Issue 2
*******************************************
