【openEuler 25.09 Round 1】【aarch64/x86_64】java-1.8.0-openjdk-devel-1.8.0.462.b08-3.oe2509 安全编译选项 Strip 不满足

【软件信息】
1） OS版本及分支: openEuler 25.09 Round 1
2） 内核信息: 6.6.0

【issue说明】
1. 该issue属于版本安全测试-安全编译选项测试内容
2. 扫描结果均由majun平台安全扫描统一提供，遵循openEuler安全编译选项实施要求(C&C++)
https://gitee.com/openeuler/security-committee/blob/master/docs/zh/developer-guide/SecureCompile(C%26C%2B%2B).md
3. 自验可使用checksec工具验证，或使用命令readelf、file、objdump等进行验证
4. 如有误报，评论@issue提出人-说明误报情况，并修改issue为已完成即可
5. 如编译选项与相关要求不同，但能实现相同及更高安全功能，评论@issue提出人-说明相关情况，并修改issue为已完成即可

【问题复现步骤】
1. rpm2cpio *.rpm | cpio -id 
2. checksec file <file_name>
   checksec获取地址：https://github.com/slimm609/checksec/releases

【预期结果】
$checksec file <file_name>
RELRO           Stack Canary      NX            PIE             RPATH      RUNPATH      Symbols   
Full RELRO      Canary Found      NX enabled    PIE Enabled     No RPATH   No RUNPATH   No Symbols

checksec结果对应安全编译选项：
- RELRO：RELRO + BIND_NOW（Partial RELRO 表示未开启）
- Stack Canary：SP
- NX：NX
- PIE：PIE
- RPATH/RUNPATH：NO Rpath/RunPath
- Symbols：Strip

【实际结果】
java-1.8.0-openjdk-devel-1.8.0.462.b08-3.oe2509 安全编译选项 Strip 不满足

【不满足文件列表】
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/appletviewer
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/clhsdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/extcheck
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/hsdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/idlj
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jar
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jarsigner
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/java
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/javac
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/javadoc
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/javah
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/javap
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jcmd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jconsole
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jdeps
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jfr
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jhat
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jinfo
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jjs
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jmap
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jps
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jrunscript
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jsadebugd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jstack
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jstat
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/jstatd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/keytool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/native2ascii
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/orbd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/pack200
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/policytool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/rmic
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/rmid
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/rmiregistry
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/schemagen
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/serialver
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/servertool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/tnameserv
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/unpack200
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/wsgen
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/wsimport
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/bin/xjc
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/lib/aarch64/jli/libjli.so
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/lib/aarch64/libjawt.so
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.aarch64/lib/jexec
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/appletviewer
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/clhsdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/extcheck
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/hsdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/idlj
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jar
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jarsigner
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/java
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/javac
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/javadoc
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/javah
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/javap
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jcmd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jconsole
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jdb
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jdeps
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jfr
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jhat
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jinfo
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jjs
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jmap
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jps
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jrunscript
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jsadebugd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jstack
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jstat
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/jstatd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/keytool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/native2ascii
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/orbd
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/pack200
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/policytool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/rmic
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/rmid
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/rmiregistry
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/schemagen
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/serialver
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/servertool
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/tnameserv
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/unpack200
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/wsgen
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/wsimport
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/bin/xjc
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/lib/amd64/jli/libjli.so
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/lib/amd64/libjawt.so
/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.462.b08-3.oe2509.x86_64/lib/jexec

**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1
openEuler-24.03-LTS-SP2

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1
openEuler-24.03-LTS-SP2

src-openEuler/openjdk-1.8.0

内容风险标识

评论 (4)

src-openEuler/openjdk-1.8.0 .gitee-modal { width: 500px !important; }

内容风险标识