Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi, 2016-11-04 4:42 GMT+01:00 Guillem Jover : > Hi! > > On Mon, 2016-05-23 at 11:45:46 +0100, Steven Chamberlain wrote: >> This may be a silly / obvious question to ask, but: >> do any of the proposed hardening options _really_ change the ABI? > > I don't think it's silly at

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi! On Mon, 2016-05-23 at 11:45:46 +0100, Steven Chamberlain wrote: > This may be a silly / obvious question to ask, but: > do any of the proposed hardening options _really_ change the ABI? I don't think it's silly at all! I've actually wondered this myself and asked Bálint in person and at

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Control: forcemerge 812782 -1 Hi! On Tue, 2016-01-26 at 15:33:40 +0100, Balint Reczey wrote: > Package: dpkg > Version: 1.18.4 > Severity: wishlist > Tags: patch > User: bal...@balintreczey.hu > Usertags: hardened1-linux-amd64 > This is the second patch enabling extra flags in dpkg in case the

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi, This may be a silly / obvious question to ask, but: do any of the proposed hardening options _really_ change the ABI? I think LLVM/Clang's ASan implementation does (for Feature: "symbol size changing for global variables" on

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

On Wed, 2016-03-09 at 14:07:22 +0100, Bálint Réczey wrote: > 2016-03-09 12:09 GMT+01:00 Guillem Jover : > > On Tue, 2016-03-08 at 11:29:04 +0100, Bálint Réczey wrote: > >> 2016-03-08 1:52 GMT+01:00 Guillem Jover : > >> > Actually setting bindnow and PIE

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi Guillem, 2016-03-09 12:09 GMT+01:00 Guillem Jover : > Hi! > > On Tue, 2016-03-08 at 11:29:04 +0100, Bálint Réczey wrote: >> 2016-03-08 1:52 GMT+01:00 Guillem Jover : >> > Actually setting bindnow and PIE would be fine as part of the default >> > build

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi! On Tue, 2016-03-08 at 11:29:04 +0100, Bálint Réczey wrote: > 2016-03-08 1:52 GMT+01:00 Guillem Jover : > > Actually setting bindnow and PIE would be fine as part of the default > > build flags from dpkg, because those do not change the ABI in > > principle. And those are

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi Guillem, 2016-03-08 1:52 GMT+01:00 Guillem Jover : > Control: block -1 by 812782 > > On Fri, 2016-01-29 at 12:55:42 +0100, Bálint Réczey wrote: >> 2016-01-29 0:46 GMT+01:00 Guillem Jover : >> > On Tue, 2016-01-26 at 15:33:40 +0100, Balint Reczey wrote:

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Control: block -1 by 812782 On Fri, 2016-01-29 at 12:55:42 +0100, Bálint Réczey wrote: > 2016-01-29 0:46 GMT+01:00 Guillem Jover : > > On Tue, 2016-01-26 at 15:33:40 +0100, Balint Reczey wrote: > >> Package: dpkg > >> Version: 1.18.4 > >> Severity: wishlist > >> Tags: patch >

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi, 2016-01-29 0:46 GMT+01:00 Guillem Jover : > Hi! > > On Tue, 2016-01-26 at 15:33:40 +0100, Balint Reczey wrote: >> Package: dpkg >> Version: 1.18.4 >> Severity: wishlist >> Tags: patch >> User: bal...@balintreczey.hu >> Usertags: hardened1-linux-amd64 > >> This is the

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Hi! On Tue, 2016-01-26 at 15:33:40 +0100, Balint Reczey wrote: > Package: dpkg > Version: 1.18.4 > Severity: wishlist > Tags: patch > User: bal...@balintreczey.hu > Usertags: hardened1-linux-amd64 > This is the second patch enabling extra flags in dpkg in case the > hardened1-linux-amd64 port is

Bug#812783: dpkg: Please use ASAN, UBSAN and bindnow on hardened1-linux-amd64

Package: dpkg Version: 1.18.4 Severity: wishlist Tags: patch User: bal...@balintreczey.hu Usertags: hardened1-linux-amd64 Dear Guillem, This is the second patch enabling extra flags in dpkg in case the hardened1-linux-amd64 port is accepted in #812782. Cheers, Balint >From