Re: ERROR: [...] missing RELRO

[Hauke Fath <hauke%Espresso.Rhein-Neckar.DE@localhost>]

On Fri, 1 Oct 2021 13:29:37 +0000, nia wrote:
> Hello, the well meaning person was me :)
> If you want an explanation of RELRO, this one is _really_ good:
> 
https://www.redhat.com/en/blog/hardening-elf-binaries-using-relocation-read-only-relro

It is indeed. Would you mind adding the link to the wiki entry? Thanks!
 
> I believe the problem with netatalk22 is that it's installing
> static libraries to libexec/. This is not typically expected.

These are authentication modules. I guess I knew why they are static in 
another life.
 
> The check-relro script is expecting that the static libraries are
> executables, checking for the RELRO linker flags, but of course...
> Static libraries aren't linked.
> 
> In this case, I will be adding CHECK_RELRO_SKIP to netatalk22.

That was fast. Thanks a lot!

Cheerio,
Hauke

-- 
Hauke Fath                        <hauke%Espresso.Rhein-Neckar.DE@localhost>
Linnéweg 7
64342 Seeheim-Jugenheim
Germany