4 Commits

Author	SHA1	Message	Date
Wladimir J. van der Laan	a9a209f586	Merge #7723: build: python 3 compatibility ... 18f05c7 build: python 3 compatibility (Wladimir J. van der Laan)	2017-12-19 13:18:30 +01:00
Wladimir J. van der Laan	38080259be	Merge pull request #7313 ... 0331aa3 Fixing typos on security-check.py and torcontrol.cpp (calebogden)	2017-12-10 00:04:01 +01:00
Cory Fields	aa26ee0101	release: Add security/export checks to gitian and fix current failures ... - fix parsing of BIND_NOW with older readelf - add _IO_stdin_used to ignored exports For details see: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634261#109 - add check-symbols and check-security make targets These are not added to the default checks because some of them depend on release-build configs. - always link librt for glibc back-compat builds glibc absorbed clock_gettime in 2.17. librt (its previous location) is safe to link in anyway for back-compat. Fixes #7420 - add security/symbol checks to gitian Github-Pull: #7424 Rebased-From: cd27bf51e0 475813ba5b f3d3eaf78e a8ce872118 a81c87fafc	2016-01-27 11:33:33 +01:00
Wladimir J. van der Laan	579b863cd7	devtools: Add security-check.py ... Perform the following ELF security checks: - PIE: Check for position independent executable (PIE), allowing for address space randomization - NX: Check that no sections are writable and executable (including the stack) - RELRO: Check for read-only relocations, binding at startup - Canary: Check for use of stack canary Also add a check to symbol-check.py that checks that only the subset of allowed libraries is imported (to avoid incompatibilities).	2015-10-22 03:35:38 +02:00