| View previous topic :: View next topic |
| Author |
Message |
h4rdened
n00b
Joined: 13 May 2017
Posts: 14
|
 Posted: Tue May 23, 2017 2:23 pm Post subject: [Gentoo hardened] NO RELRO for www-client/surf |
 |
|
Hello,
I'm having a problem since the new update of www-client/surf, the version 2.0, checksec show those 2 processus with NO RELRO
Those processus have their binary located in :
| Code: |
/usr/libexec/WebKitNetworkProcess
/usr/libexec/WebKitWebProcess
|
This happen only with the current version (2.0). The surf version 0.6-r1 and 0.7-r1 do not spawn thoses process and the checksec -pa show Full RELRO
for all the process running
net-libs/webkit-gtk is installed on the following version :
Both have the single useflag X :
| Code: | (X -aqua -coverage -debug -egl -geolocation -gles2 -gnome-keyring -gstreamer -introspection -jit -opengl -spell -test -wayland -webgl)
|
I'm not sure if this problem come from Gentoo or the code of surf 2.0. This is the first time something like that happen : Chromium / Firefox / links / lynx / dillo / Torbrowser (layman) pass the checksec hardening test and as far I known, no other process have show a NO RELRO
Thanks |
|
| Back to top |
|
 |
h4rdened
n00b
Joined: 13 May 2017
Posts: 14
|
| Posted: Sat May 27, 2017 1:32 am Post subject: |
|
|
So surf client is not the problem here.
It's appear that webkit-gtk 2.16.x doesn't build those binary (WebKitNetworkProcess and WebKitWebProcesss) with the options RELRO, unlike webkit-gtk 2.4
Is there any reason ? |
|
| Back to top |
|
|
|
Networking & Security
