From: Philippe Troin <phil@fifi.org>
To: zsh-workers@zsh.org
Subject: Re: [Bug] modules zsh/tcp, zsh/zftp unloadable, probably affecting most modern Linuxes
Date: Tue, 06 Jun 2023 09:37:01 -0700 [thread overview]
Message-ID: <9d6e40041e3786987f54adf1080d201085b08625.camel@fifi.org> (raw)
In-Reply-To: <890683328.5067391.1686063668614@mail.virginmedia.com>
On Tue, 2023-06-06 at 16:01 +0100, Peter Stephenson wrote:
> > On 06/06/2023 15:38 Jun. T <takimoto-j@kba.biglobe.ne.jp> wrote:
> >
> >
> > > 2023/06/06 18:05, Peter Stephenson <p.w.stephenson@ntlworld.com>
> > > wrote:
> > >
> > > > On 06/06/2023 07:42 Jun T <takimoto-j@kba.biglobe.ne.jp> wrote:
> > > >
> > > > Why '-z now' is used when building binary packages? For
> > > > security?
> > >
> > > I think this is just so that failure to find symbols at all will
> > > show up quickly in the build rather than at run time, which would
> > > be a real pain.
> >
> > I think '-z now' is to mark (add the flag) zftp.so so that the
> > dynamic linker resolves all the symbols when _loading_ it;
> > the symbols are not resolved when _building_ zftp.so.
>
> Yes, it does say it gets applied at the point of dlopen(), so it's
> explicitly counteracting RTLD_LAZY.
>
> Is this specific to the Fedora configuration in their own source
> package? I don't see an obvious sign the standard zsh build itself
> is making this choice. configure has some system-specific tweaks
> for dynamic loading, but not this.
"-z now" is automatically added to all builds by the hardening
configuration on RedHat/Fedora and possibly derived distributions:
% ag -- -Wl.*now /usr/lib/rpm/
/usr/lib/rpm/macros.d/macros.rust
46: -Clink-arg=-Wl,-z,now
/usr/lib/rpm/redhat/macros
302:%_hardening_ldflags -Wl,-z,now %[ "%{toolchain}" == "gcc" ? "-specs=/usr/lib/rpm/redhat/redhat-hardened-ld" : "" ]
Phil.
next prev parent reply other threads:[~2023-06-06 16:37 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-06-04 13:51 Marcus Müller
2023-06-04 20:37 ` Marcus Müller
2023-06-04 21:17 ` Philippe Troin
2023-06-05 19:35 ` Marcus Müller
2023-06-05 20:07 ` Bart Schaefer
2023-06-06 6:42 ` Jun T
2023-06-06 9:05 ` Peter Stephenson
2023-06-06 14:38 ` Jun. T
2023-06-06 15:01 ` Peter Stephenson
2023-06-06 16:37 ` Philippe Troin [this message]
2023-06-06 17:54 ` Mikael Magnusson
2023-06-07 2:05 ` Jun T
2023-06-07 2:35 ` Jun T
2023-06-07 14:40 ` Jun. T
2023-06-23 13:41 ` Jun. T
2023-06-07 9:25 ` Marcus Müller
2023-06-04 22:41 ` Axel Beckert
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9d6e40041e3786987f54adf1080d201085b08625.camel@fifi.org \
--to=phil@fifi.org \
--cc=zsh-workers@zsh.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.vuxu.org/mirror/zsh/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).