Trac:
Owner: mikeperry to erinn
Component: Tor Browser to Tor bundles/installation

Trac:
Cc: N/A to g.koppen@jondos.de

I agree - quite an important thing to do. See also bug #5210 (moved)

Trac:
Cc: g.koppen@jondos.de to g.koppen@jondos.de, tails@boum.org

Trac:
Summary: comile time hardening of TBB (RELRO, canary, PIE) to compile time hardening of TBB (RELRO, canary, PIE)

Since Firefox is one of the most frequently used applications and therefore heavily targeted, I think this is important to have.

Trac:
Priority: normal to major

Shouldn't we split this one into separate tickets?

• Tor already done #5210 (moved)
• Vidalia, are they aware of this ticket?
• Tor Browser

I think it's important to have too; With TBB 2.2.39 there is still no hardening at all:

start-tor-brows 10499 No RELRO No canary found NX enabled No PIE
vidalia 10516 No RELRO No canary found NX enabled No PIE
tor 10519 No RELRO No canary found NX enabled No PIE
firefox 10522 No RELRO No canary found NX enabled No PIE

I think we should break it up too, or at least create a ticket for Vidalia. For Firefox I think we will have to see about borrow Ubuntu/Debian's patch, but I don't even know which version of Firefox they are using and it is going to be tricky if the patch needs regular updating.

Trac:
Keywords: N/A deleted, needs-triage added

Trac:
Status: new to assigned
Component: Tor bundles/installation to Tor Browser
Keywords: needs-triage deleted, N/A added

Trac:
Cc: g.koppen@jondos.de, tails@boum.org to g.koppen@jondos.de, intrigeri

Trac:
Cc: g.koppen@jondos.de, intrigeri to gk, intrigeri
Keywords: N/A deleted, tbb-security added

Trac:
Parent: N/A to #10065 (moved)

This should be fixed in 3.6.5 and 4.0-alpha-2. We have at least partial RELRO support now.

We will open another bug for full RELRO support.

Trac:
Status: assigned to closed
Resolution: N/A to fixed