http://bugzilla.suse.com/show_bug.cgi?id=980384 Bug ID: 980384 Summary: Enable PIE and full relro build for firefox Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: bnc-team-mozilla@forge.provo.novell.com Reporter: dsterba@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 677257 --> http://bugzilla.suse.com/attachment.cgi?id=677257&action=edit enable firefox PIE and full relro on x86_64 PIE (position independent code) and full relro are features that have security implications on built binaries. The firefox browser does not have enabled them but as it's it an exposed tool, the improvements are desirable. Upstream builds do not enable PIE for very unconvincing reasons (because some graphical file manager does not recigonize the binary with PIE as executable). Firefox upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1076892 References: http://bugs.gw.com/view.php?id=404 I've tested build on Factory (currently 46.0), passes, binary (firefox-bin) verified to have the mentioned features. Attached patch enables them on x86_64. More arches can be added later. -- You are receiving this mail because: You are on the CC list for the bug.