Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

make drachtio more hardened #228

Open
asarubbo opened this issue Oct 18, 2022 · 0 comments
Open

make drachtio more hardened #228

asarubbo opened this issue Oct 18, 2022 · 0 comments

Comments

@asarubbo
Copy link

Hello Dave,

while recent version of gcc compile by default with many hardening flags ( but it may depends on the distro choice) I think it is worth add a bit of hardening here.

You can take hints from here: https://wiki.gentoo.org/wiki/Hardened/Toolchain#Changes

The checksec program also helps to understand how it was compiled.

# checksec --file /usr/local/bin/drachtio 
RELRO           STACK CANARY      NX            PIE             RPATH      RUNPATH      Symbols         FORTIFY Fortified       Fortifiable  FILE
Partial RELRO   No canary found   NX enabled    PIE enabled     No RPATH   No RUNPATH   17750 Symbols   No      0               48      /usr/local/bin/drachtio

I compiled it with hardening flags and there were no issue so far on my side

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant