Bug ID | 980384 |
---|---|
Summary | Enable PIE and full relro build for firefox |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Firefox |
Assignee | bnc-team-mozilla@forge.provo.novell.com |
Reporter | dsterba@suse.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
Created attachment 677257 [details] enable firefox PIE and full relro on x86_64 PIE (position independent code) and full relro are features that have security implications on built binaries. The firefox browser does not have enabled them but as it's it an exposed tool, the improvements are desirable. Upstream builds do not enable PIE for very unconvincing reasons (because some graphical file manager does not recigonize the binary with PIE as executable). Firefox upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1076892 References: http://bugs.gw.com/view.php?id=404 I've tested build on Factory (currently 46.0), passes, binary (firefox-bin) verified to have the mentioned features. Attached patch enables them on x86_64. More arches can be added later.