Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
tails
tails
Commits
60229330
Commit
60229330
authored
Apr 07, 2013
by
Tails developers
Browse files
Research results.
parent
ba4e7177
Changes
1
Hide whitespace changes
Inline
Side-by-side
wiki/src/todo/harden_Iceweasel_at_compile_time.mdwn
View file @
60229330
...
...
@@ -13,8 +13,19 @@ Roadmap
1. Find out what additional hardening compilation option can possibly
be added to Iceweasel by the Debian maintainer. The Debian security team
might be happy to help.
- [[!tag todo/research]] Gather the maintainer's already stated
opinions on the topic: [[!debbug 609975]] and [[!debbug 653191]]
- Here's what the maintainer's already stated opinions on the
topic ([[!debbug 609975]] and [[!debbug 653191]]):
- "I'm really not a big fan of -Wl,-z,relro and -Wl,-z,now"
- "For instance, I'm not sure -z relro buys anything worth, while
it may have a significant startup performance impact on big
applications. (and if I'm not mistaken, -z relro actually makes
things not work with selinux, seeing how selinux already breaks
the mprotect that removes the write bit on code sections after
text relocations)"
> Moritz
> [has doubts](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653191#27)
> about the relro part, and "Support for selinux in Debian is
> marginal at best, anyway".
- Design a great plan. Hardening compilation options currently
enabled in:
- TBB: none
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment