| Bug ID |
8076
|
| Summary |
Build flag for SUID binaries
|
| Classification |
Unclassified
|
| Product |
Wireshark
|
| Version |
1.8.4
|
| Hardware |
x86
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Wireshark
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
--
Various Linux distribution (e.g. openSUSE, latest), enforce the use of
-fPIE/-pie on SUID binaries, in order to 'remove' some attach surface.
The binary dumpcap of wireshark falls into this category.
the flag should not be forced upon everybody (I guess), but it should be made
easy to 'inject' as needed.
For this reason, at openSUSE, we created a patch that allows to:
- inject SUID_CFLAGS
- Ibject SUID_LDFLAGS
which are passed to the respective build targets for dumpcap, without touching
other targets.
in order to not carry a patch forever, we propose to merge the patch (no side
effects, unless you export SUID_CFLAGS and SUID_LDFLAGS...)
the reason for the split of regular CFLAGS/LDFLAGS is really just to be more
granular.
You are receiving this mail because:
- You are watching all bug changes.