79775 – xlockmore is suid root yet uses lazy bindings when linking

Bug 79775 - xlockmore is suid root yet uses lazy bindings when linking

Summary: xlockmore is suid root yet uses lazy bindings when linking

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	x86 Linux

Importance:	Highest normal (vote)
Assignee:	Jonathan Smith (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2005-01-27 13:34 UTC by Stefan Sperling
Modified:	2005-06-22 15:23 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
patch to make the xlockmore ebuild append the flags by default (xlockmore-5.12.diff,634 bytes, patch) 2005-01-27 13:36 UTC, Stefan Sperling	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Sperling 2005-01-27 13:34:07 UTC

while compiling xlockmore, I saw the following message scroll by:

QA Notice: /usr/bin/xlock is setXid, dynamically linked and using lazy bindings.
This combination is generally discouraged. Try: CFLAGS='-Wl,-z,now' emerge xlockmore

Why not append-flags '-Wl,-z,now' by default?

Comment 1 Stefan Sperling 2005-01-27 13:36:42 UTC

Created attachment 49687 [details, diff]
patch to make the xlockmore ebuild append the flags by default

Comment 2 Jonathan Smith (RETIRED) gentoo-dev

2005-06-22 15:23:32 UTC

your patch didn't apply cleanly to the most recent version, but i fixed the
problem in 5.17-r1

thanks for the info