Qubes processes should use hardening flags
32 views
Skip to first unread message
Lorenzo Lamas
Aug 20, 2016, 2:32:37 PM8/20/16
to qubes-users
A quick check in the Fedora 23 VM with Checksec shows all migitations enabled for most processes. Processes from Qubes however are missing migitations.
A short list: (These are the processes that I know are from Qubes, some might be missing)
A short list: (These are the processes that I know are from Qubes, some might be missing)
qubes-db-deamon:No PIE, No Stack Canary, RELRO only partial
qrexec-agent: No Stack Canary, RELRO only partial
qubes-gui: No Stack Canary, RELRO only partial
qrexec-client-c: No Stack Canary, RELRO only partial
qrexec-fork-ser: No Stack Canary, RELRO only partial
icon sender: RELRO only partial
Andrew David Wong
Aug 20, 2016, 3:21:14 PM8/20/16
to Lorenzo Lamas, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Thanks! Tracking here:
https://github.com/QubesOS/qubes-issues/issues/2259
- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----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=j6b4
-----END PGP SIGNATURE-----
Hash: SHA512
https://github.com/QubesOS/qubes-issues/issues/2259
- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----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=j6b4
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages