On hardened I get: * Messages for package app-emulation/lxd-2.16: * Please check to make sure these options are set correctly. * Failure to do so may cause unexpected problems. * QA Notice: The following files contain runtime text relocations * Text relocations force the dynamic linker to perform extra * work at startup, waste system resources, and may pose a security * risk. On some architectures, the code may not even function * properly, if at all. * For more information, see: * * https://wiki.gentoo.org/wiki/Hardened/HOWTO_locate_and_fix_textrels * * Please include the following list of files in your report: * TEXTREL usr/sbin/lxd * TEXTREL usr/bin/fuidshift * TEXTREL usr/bin/lxc * QA Notice: The following files contain writable and executable sections * Files with such sections will not work properly (or at all!) on some * architectures/operating systems. A bug should be filed at * https://bugs.gentoo.org/ to make sure the issue is fixed. * For more information, see: * * https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart * * Please include the following list of files in your report: * Note: Bugs should be filed for the respective maintainers * of the package in question and not hardened@g.o. * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/gccgoexportdata/testdata/long.a:name-longer-than-16-bytes.gox * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/gccgoexportdata/testdata/short.a:foo.gox * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/internal/gccgoimporter/testdata/time.gox * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/internal/gccgoimporter/testdata/unicode.gox @HARDENED-TEAM as per the link at $URL, upstream does not compile it as ET_DYN. Maybe they aren't so much interested into fix this, but can you give them some suggestions? Thanks
Ago do you get the same output on when use Gcc 6 and newer?
No, with gcc-6.4.0 I don't see the TEXTREL issue. I just see the !WX sections issues.
I'm unfamiliar with hardened setups and I'm a bit uncomfortable with the idea of adding files I can't verify the effect of. Wouldn't it be better if someone with a hardened setup submitted a patch?
(In reply to Virgil Dupras from comment #3) > I'm unfamiliar with hardened setups and I'm a bit uncomfortable with the > idea of adding files I can't verify the effect of. > > Wouldn't it be better if someone with a hardened setup submitted a patch? GCC 6.4 will soon be stable and it looks the TEXTREL is gone with that version of gcc.
Closing as obsolete since (per comments below) later gcc's fix this. Also 'scanelf -lpqt' comes up empty for me.
