Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 678956 - Consider removing 'sanitize' use mask from gcc in hardened
Summary: Consider removing 'sanitize' use mask from gcc in hardened
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-02-27 17:16 UTC by Hanno Böck
Modified: 2019-03-10 12:30 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hanno Böck gentoo-dev 2019-02-27 17:16:54 UTC
The gcc packages hard-disable the sanitize flag on hardened profiles, making the sanitizer options unavailable on hardened systems.

I believe the intention was that the sanitizers are incompatible with grsecurity and hardened systems were supposed to be run with grsec-patched kernels. But given that grsec is no more I think this is no longer relevant.
Comment 1 Sergei Trofimovich (RETIRED) gentoo-dev 2019-02-27 21:20:21 UTC
(In reply to Hanno Boeck from comment #0)
> The gcc packages hard-disable the sanitize flag on hardened profiles, making
> the sanitizer options unavailable on hardened systems.
> 
> I believe the intention was that the sanitizers are incompatible with
> grsecurity and hardened systems were supposed to be run with grsec-patched
> kernels. But given that grsec is no more I think this is no longer relevant.

Mask is present in hardened features:
    profiles/features/hardened/package.use.mask:sys-devel/gcc -hardened sanitize
but entry links no bug. I assume it's caused by bug #458706.

Reassigning to hardened@ to check on current/future status.
Comment 2 Larry the Git Cow gentoo-dev 2019-03-10 12:30:41 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b089a3662eb5ad528c1fddf9228f7ac8017287d8

commit b089a3662eb5ad528c1fddf9228f7ac8017287d8
Author:     Magnus Granberg <zorry@gentoo.org>
AuthorDate: 2019-03-10 12:27:57 +0000
Commit:     Magnus Granberg <zorry@gentoo.org>
CommitDate: 2019-03-10 12:29:45 +0000

    profile: hardened: remove mask use senitize from gcc
    
    Closes: https://bugs.gentoo.org/678956
    Signed-off-by: Magnus Granberg <zorry@gentoo.org>

 profiles/features/hardened/package.use.mask | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)