Bug 679784

Summary:	sys-apps/findutils does not respect CFLAGS (stack-protection)
Product:	Gentoo Linux	Reporter:	Agostino Sarubbo <ago>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2019-03-08 16:03:52 UTC

This is an auto-filled bug because this package does not respect user's CFLAGS.

While SSP is really good for security purpose, I'd expect that with CFLAGS="-fno-stack-protector" the package should not have stack protection.
In this case the file /usr/bin/find (and maybe some other file from this package) has stack protection.
To check the SSP status you can use:
checksec --file /usr/bin/find  (from app-admin/checksec)
hardening-check /usr/bin/find  (from app-admin/hardening-check)
readelf -sW /usr/bin/find | grep "__stack_chk_fail"

Comment 1 Agostino Sarubbo gentoo-dev

2019-03-09 13:47:54 UTC

I'm sorry for the bugspam but this bug comes from a false-positive, more info at https://bugs.gentoo.org/679788#c2