【24.03 SP2】【x86/arm】kae-zip-2.0.3-1.oe2403sp2安全编译选项不满足

软件信息：
1） OS版本及分支:openEuler 24.03 SP2
2） 内核信息:kernel-6.6.0

【预期结果】
1、包含BIND_NOW的值
2、GNU_STACK segment的flags值不具有E权限
3、包含PIE标志
4、不包含包含RPATH或者RUNPATH
5、不包含not stripped
6、包含GNU_RELRO的值

【实际结果】
安全编译选项RPATH、Strip不满足

【不满足文件列表】
RPATH：
/usr/local/kaelz4/lib/liblz4.so.1
/usr/local/kaelz4/lib/liblz4.so
/usr/local/kaelz4/lib/liblz4.so.1.9.4
/usr/local/kaelz4/lib/libkaelz4.so.2.0.3
/usr/local/kaelz4/bin/lz4
/usr/local/kaezstd/lib/libzstd.so
/usr/local/kaezstd/lib/libzstd.so.1.5.2
/usr/local/kaezstd/lib/libzstd.so.1
/usr/local/kaezstd/bin/zstd
/usr/local/kaezip/lib/libz.so
/usr/local/kaezip/lib/libz.so.1.2.11
/usr/local/kaezip/lib/libz.so.1

Strip：
/usr/local/kaelz4/lib/liblz4.so.1
/usr/local/kaelz4/lib/liblz4.so
/usr/local/kaelz4/lib/liblz4.so.1.9.4
/usr/local/kaelz4/lib/libkaelz4.so.2.0.3
/usr/local/kaelz4/bin/lz4
/usr/local/kaezstd/lib/libzstd.so
/usr/local/kaezstd/lib/libkaezstd.so.2.0.3
/usr/local/kaezstd/lib/libzstd.so.1.5.2
/usr/local/kaezstd/lib/libzstd.so.1
/usr/local/kaezstd/bin/zstd
/usr/local/kaezip/lib/libz.so
/usr/local/kaezip/lib/libz.so.1.2.11
/usr/local/kaezip/lib/libkaezip.so.2.0.3
/usr/local/kaezip/lib/libz.so.1
**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

src-openEuler/kae_driver
关闭

内容风险标识

评论 (4)

src-openEuler/kae_driver关闭 .gitee-modal { width: 500px !important; }

内容风险标识