Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 679510

Summary: net-misc/ntpsec does not respect CFLAGS (pie) and LDFLAGS (relro)
Product: Gentoo Linux Reporter: Agostino Sarubbo <ago>
Component: Current packagesAssignee: Anthony Basile <blueness>
Status: RESOLVED FIXED    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Agostino Sarubbo gentoo-dev 2019-03-05 10:08:31 UTC
This is an auto-filled bug because this package does not respect user's CFLAGS.

While SSP is really good for security purpose, I'd expect that with CFLAGS="-fno-stack-protector" the package should not have stack protection.
In this case the file /usr/sbin/ntpd (and maybe some other file from this package) has stack protection.
To check the SSP status you can use: checksec --file /usr/sbin/ntpd

The same issue happens for relro and pie.
Comment 1 Agostino Sarubbo gentoo-dev 2019-03-11 07:49:34 UTC
I'm sorry but the stack-protection issue was a false positive.

Anyway the bug is present for RELRO and pie.

PIE, in other packages is managed by a useflag (see ssh and pam)
Comment 2 Steve Arnold archtester gentoo-dev 2021-01-26 03:21:12 UTC
At least this one appears fixed in 1.2.0, which I'm about to push.
Comment 3 Larry the Git Cow gentoo-dev 2022-12-30 06:33:33 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3e5dc88331ebe51f7b98a4aaca17657b7e914d63

commit 3e5dc88331ebe51f7b98a4aaca17657b7e914d63
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-12-30 06:29:54 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-12-30 06:32:19 +0000

    net-misc/ntpsec: add 1.2.2
    
    Closes: https://bugs.gentoo.org/679510
    Closes: https://bugs.gentoo.org/753854
    Closes: https://bugs.gentoo.org/806037
    Closes: https://bugs.gentoo.org/839597
    Closes: https://bugs.gentoo.org/885879
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/ntpsec/Manifest            |   1 +
 net-misc/ntpsec/ntpsec-1.2.2.ebuild | 163 ++++++++++++++++++++++++++++++++++++
 net-misc/ntpsec/ntpsec-9999.ebuild  |   3 +-
 3 files changed, 165 insertions(+), 2 deletions(-)