Wireshark-bugs: [Wireshark-bugs] [Bug 8076] New: Build flag for SUID binaries
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 10 Dec 2012 10:22:05 +0000
Bug ID 8076
Summary Build flag for SUID binaries
Classification Unclassified
Product Wireshark
Version 1.8.4
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Wireshark
Assignee bugzilla-admin@wireshark.org
Reporter dominique-wireshark.org@leuenberger.net 

Build Information:

--
Various Linux distribution (e.g. openSUSE, latest), enforce the use of
-fPIE/-pie on SUID binaries, in order to 'remove' some attach surface.

The binary dumpcap of wireshark falls into this category.

the flag should not be forced upon everybody (I guess), but it should be made
easy to 'inject' as needed.

For this reason, at openSUSE, we created a patch that allows to:
- inject SUID_CFLAGS
- Ibject SUID_LDFLAGS
which are passed to the respective build targets for dumpcap, without touching
other targets.

in order to not carry a patch forever, we propose to merge the patch (no side
effects, unless you export SUID_CFLAGS and SUID_LDFLAGS...)

the reason for the split of regular CFLAGS/LDFLAGS is really just to be more
granular.

You are receiving this mail because:
  • You are watching all bug changes.