[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13031 [Tor Browser]: Provide full RELRO protection on Linux

#13031: Provide full RELRO protection on Linux
-----------------------------+--------------------------
     Reporter:  mikeperry    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-security
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------

Comment (by cypherpunks):

 It's probably about [https://gitweb.torproject.org/builders/tor-browser-
 bundle.git/commitdiff/d8e92e2f4d362216dfff1790026309e6c0a51b58
 d8e92e2f4d362216dfff1790026309e6c0a51b58] commit (fix for #12103 as is).
 It builds independent binutils and creates new `ld.gold` that used instead
 of link to `hardened-ld` (real `ld.gold` should be renamed by wrapper to
 `ld.gold.real`). Then it using such "non hardened" ld.gold later.

 With hardened wrappers enabled `ld` files are:
 `ld` is link to `ld.gold` or `ld.bfd` (depends preferable linker)
 `ld.gold` and `ld.bfd` are links to `hardened-ld`
 real linkers are `ld.gold.real` and `ld.bfd.real` which used by `hardened-
 ld` perl script.

 Building of compiler or linker should to count existence of hardened
 wrappers and allow to use them instead of unconditional replacing of
 stuff.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13031#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs