【20.03-LTS-SP4 round1】【x86/arm】strongswan-5.7.2-10.oe2003sp4安全编译选项Runpath/Rpath不满足

软件信息：
1） OS版本及分支:openEuler 20.03-LTS-SP4 round1
2） 内核信息:Linux openEuler 4.19.90-2310.4.0.0227.oe2003sp4

【问题复现步骤】
1、PIE：查看编译日志中是否包含FPIE编译选项
2、STRIP：（1）：rpm2cpio **.rpm|cpio -id （2）file $file
3、RPATH：（1）：rpm2cpio **.rpm|cpio -id （2）readelf -d $file

【预期结果】
1、包含FPIE安全编译选项
2、不包含not stripped
3、不包含rpath/runpath

【实际结果】
strongswan-5.7.2-10.oe2003sp4安全编译选项Runpath/Rpath不满足

【不满足文件列表】
/usr/sbin/charon-cmd
/usr/sbin/swanctl
/usr/sbin/sw-collector
/usr/sbin/charon-systemd
/usr/sbin/sec-updater
/usr/libexec/strongswan/tpm_extendpcr
/usr/libexec/strongswan/pt-tls-client
/usr/libexec/strongswan/attest
/usr/libexec/strongswan/scepclient
/usr/libexec/strongswan/imv_policy_manager
/usr/libexec/strongswan/stroke
/usr/libexec/strongswan/_copyright
/usr/libexec/strongswan/pki
/usr/libexec/strongswan/charon-nm
/usr/libexec/strongswan/charon
/usr/libexec/strongswan/starter
/usr/libexec/strongswan/aikgen
/usr/lib64/strongswan/libtpmtss.so.0.0.0
/usr/lib64/strongswan/libpttls.so.0.0.0
/usr/lib64/strongswan/libcharon.so.0.0.0
/usr/lib64/strongswan/imcvs/imc-attestation.so
/usr/lib64/strongswan/imcvs/imv-attestation.so
/usr/lib64/strongswan/imcvs/imv-swima.so
/usr/lib64/strongswan/imcvs/imc-swima.so
/usr/lib64/strongswan/imcvs/imc-os.so
/usr/lib64/strongswan/imcvs/imv-scanner.so
/usr/lib64/strongswan/imcvs/imc-hcd.so
/usr/lib64/strongswan/imcvs/imv-os.so
/usr/lib64/strongswan/imcvs/imc-test.so
/usr/lib64/strongswan/imcvs/imv-test.so
/usr/lib64/strongswan/imcvs/imv-hcd.so
/usr/lib64/strongswan/imcvs/imc-scanner.so
/usr/lib64/strongswan/libvici.so.0.0.0
/usr/lib64/strongswan/libsimaka.so.0.0.0
/usr/lib64/strongswan/libtnccs.so.0.0.0
/usr/lib64/strongswan/plugins/libstrongswan-eap-radius.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-tnc.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-aka-3gpp2.so
/usr/lib64/strongswan/plugins/libstrongswan-tnc-ifmap.so
/usr/lib64/strongswan/plugins/libstrongswan-tnc-imv.so
/usr/lib64/strongswan/plugins/libstrongswan-tpm.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-aka.so
/usr/lib64/strongswan/plugins/libstrongswan-tnc-tnccs.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-tls.so
/usr/lib64/strongswan/plugins/libstrongswan-tnccs-20.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-sim-file.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-aka-3gpp.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-peap.so
/usr/lib64/strongswan/plugins/libstrongswan-tnc-imc.so
/usr/lib64/strongswan/plugins/libstrongswan-tnccs-dynamic.so
/usr/lib64/strongswan/plugins/libstrongswan-tnc-pdp.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-sim.so
/usr/lib64/strongswan/plugins/libstrongswan-eap-ttls.so
/usr/lib64/strongswan/plugins/libstrongswan-kernel-libipsec.so
/usr/lib64/strongswan/plugins/libstrongswan-tnccs-11.so
/usr/lib64/strongswan/plugins/libstrongswan-newhope.so
/usr/lib64/strongswan/libipsec.so.0.0.0
/usr/lib64/strongswan/libimcv.so.0.0.0
/usr/lib64/strongswan/libtls.so.0.0.0
/usr/lib64/strongswan/libradius.so.0.0.0
**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

src-openEuler/strongswan
关闭

内容风险标识

评论 (5)

src-openEuler/strongswan关闭 .gitee-modal { width: 500px !important; }

内容风险标识