[tor-bugs] #13031 [Tor Browser]: Provide full RELRO protection on Linux

[Tor Bug Tracker & Wiki]

#13031: Provide full RELRO protection on Linux
-----------------------------+--------------------------
     Reporter:  mikeperry    |      Owner:  tbb-team
         Type:  defect       |     Status:  needs_review
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-security
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------------
Changes (by cypherpunks):

 * status:  needs_revision => needs_review


Comment:

 {{{
 --- gitian-utils.yml.original
 +++ gitian-utils.yml
 @@ -61,9 +61,6 @@
    make $MAKEOPTS
    make install
    # Make sure gold is used and not ld.
 -  cd $INSTDIR/binutils/bin
 -  rm ld
 -  ln -sf ld.gold ld
    cd ~/build

    # Building Libevent
 }}}
 {{{
 --- gitian-firefox.yml.original
 +++ gitian-firefox.yml
 @@ -65,6 +65,12 @@
    export PATH=$INSTDIR/python/bin:$PATH
    #
    unzip -d $INSTDIR binutils-linux$GBUILD_BITS-utils.zip
 +  cd $INSTDIR/binutils/bin
 +  rm ld
 +  cp /usr/bin/hardened-ld ./
 +  mv ld.gold ld.gold.real
 +  ln -sf hardened-ld ld.gold
 +  ln -sf ld.gold ld
    export PATH=$INSTDIR/binutils/bin:$PATH
    mkdir -p $INSTDIR/Browser/
    mkdir -p $INSTDIR/Debug/Browser/components
 }}}
 Lets test ver2.0

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13031#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online