Please re-enable PIE and BIND_NOW
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
postgresql-9.1 (Ubuntu) |
Fix Released
|
High
|
Martin Pitt | ||
Precise |
Won't Fix
|
Undecided
|
Unassigned | ||
Quantal |
Fix Released
|
High
|
Martin Pitt |
Bug Description
Older versions of postgresql were compiled with PIE and BIND_NOW. Unfortunately, these were lost in 12.04. Eg, output from hardening-check:
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
/tmp/built-
Position Independent Executable: no, normal executable!
Related branches
tags: | added: regression-release |
Changed in postgresql-9.1 (Ubuntu Quantal): | |
milestone: | none → ubuntu-12.10-beta-1 |
I checked the binaries in sid, and they are fine. The only difference in dpkg-buildflags between sid and quantal is that Ubuntu adds -Wl,-Bsymbolic- functions, but that seems unrelated.
So something else in our build chain must be different, I'll have a closer look.