Bug 630270 – app-emulation/lxd - /usr/sbin/lxd /usr/bin/fuidshift /usr/bin/lxc contain TEXTRELs

• Product: Gentoo Linux
• Status: RESOLVED OBSOLETE

[Description Agostino Sarubbo 2017-09-07 20:08:11 UTC]

On hardened I get:

 * Messages for package app-emulation/lxd-2.16:

 * Please check to make sure these options are set correctly.
 * Failure to do so may cause unexpected problems.
 * QA Notice: The following files contain runtime text relocations
 *  Text relocations force the dynamic linker to perform extra
 *  work at startup, waste system resources, and may pose a security
 *  risk.  On some architectures, the code may not even function
 *  properly, if at all.
 *  For more information, see:
 * 
 *    https://wiki.gentoo.org/wiki/Hardened/HOWTO_locate_and_fix_textrels
 * 
 *  Please include the following list of files in your report:
 * TEXTREL usr/sbin/lxd
 * TEXTREL usr/bin/fuidshift
 * TEXTREL usr/bin/lxc
 * QA Notice: The following files contain writable and executable sections
 *  Files with such sections will not work properly (or at all!) on some
 *  architectures/operating systems.  A bug should be filed at
 *  https://bugs.gentoo.org/ to make sure the issue is fixed.
 *  For more information, see:
 * 
 *    https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart
 * 
 *  Please include the following list of files in your report:
 *  Note: Bugs should be filed for the respective maintainers
 *  of the package in question and not hardened@g.o.
 * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/gccgoexportdata/testdata/long.a:name-longer-than-16-bytes.gox
 * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/gccgoexportdata/testdata/short.a:foo.gox
 * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/internal/gccgoimporter/testdata/time.gox
 * !WX --- --- usr/lib/go-gentoo/src/github.com/lxc/lxd/vendor/golang.org/x/tools/go/internal/gccgoimporter/testdata/unicode.gox

@HARDENED-TEAM
as per the link at $URL, upstream does not compile it as ET_DYN. Maybe they aren't so much interested into fix this, but can you give them some suggestions?
Thanks

[Comment 1 Magnus Granberg 2017-09-10 15:48:40 UTC]

Ago do you get the same output on when use Gcc 6 and newer?

[Comment 2 Agostino Sarubbo 2017-09-10 17:28:03 UTC]

No, with gcc-6.4.0 I don't see the TEXTREL issue. I just see the !WX sections issues.

[Comment 3 Virgil Dupras (RETIRED) 2017-09-23 13:20:54 UTC]

I'm unfamiliar with hardened setups and I'm a bit uncomfortable with the idea of adding files I can't verify the effect of.

Wouldn't it be better if someone with a hardened setup submitted a patch?

[Comment 4 Magnus Granberg 2017-09-23 13:38:37 UTC]

(In reply to Virgil Dupras from comment #3)
> I'm unfamiliar with hardened setups and I'm a bit uncomfortable with the
> idea of adding files I can't verify the effect of.
> 
> Wouldn't it be better if someone with a hardened setup submitted a patch?
GCC 6.4 will soon be stable and it looks the TEXTREL is gone with that version of gcc.

[Comment 5 Erik Mackdanz 2018-08-19 23:09:21 UTC]

Closing as obsolete since (per comments below) later gcc's fix this.  Also 'scanelf -lpqt' comes up empty for me.