[Bug 948280] New: windows:mingw:win{32,64}/mingw{32,64}-filesystem: Add hardening options?
http://bugzilla.opensuse.org/show_bug.cgi?id=948280 Bug ID: 948280 Summary: windows:mingw:win{32,64}/mingw{32,64}-filesystem: Add hardening options? Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba@suse.com Reporter: gerald@wireshark.org QA Contact: opensuse-communityscreening@forge.provo.novell.com CC: fridrich.strba@bluewin.ch, hib@hiberis.nl, idonmez@suse.com, mkbosmans@gmail.com, tlillqvist@suse.com Found By: --- Blocker: --- It doesn't appear that any of the mingw:win32 or mingw:win64 packages are built with hardening options enabled, e.g. --dynamicbase, --nxcompat, and --highentropyva. Would it be possible to do so? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=948280 http://bugzilla.opensuse.org/show_bug.cgi?id=948280#c2 Ralf Habacker <ralf.habacker@freenet.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ralf.habacker@freenet.de --- Comment #2 from Ralf Habacker <ralf.habacker@freenet.de> --- (In reply to Gerald Combs from comment #0)
It doesn't appear that any of the mingw:win32 or mingw:win64 packages are built with hardening options enabled, e.g. --dynamicbase, --nxcompat, and --highentropyva. Would it be possible to do so? https://sourceware.org/bugzilla/show_bug.cgi?id=19011#c9
x86_64-w64-mingw32-ld version 2.33, which is currently used by mingw32 provides the following options: --dynamicbase Image base address may be relocated using address space layout randomization (ASLR) --nxcompat Image is compatible with data execution prevention --high-entropy-va Image is compatible with 64-bit address space layout randomization (ASLR) -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply@novell.com
-
bugzilla_noreply@suse.com