[tor-bugs] #5024 [Tor Browser]: comile time hardening of TBB (RELRO, canary, PIE)

[Tor Bug Tracker & Wiki]

#5024: comile time hardening of TBB (RELRO, canary, PIE)
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:  mikeperry
     Type:  enhancement  |         Status:  new      
 Priority:  normal       |      Milestone:           
Component:  Tor Browser  |        Version:           
 Keywords:               |         Parent:           
   Points:               |   Actualpoints:           
-------------------------+--------------------------------------------------
 Would be nice if TBB (for Linux and OS X at least) would come with gcc
 hardening features applied.

 Output of checksec.sh:

          vidalia   3925 No RELRO          No canary found        NX
 enabled    No PIE
          tor   3933 No RELRO          No canary found        NX enabled
 No PIE
          firefox   3935 No RELRO          No canary found        NX
 enabled    No PIE

 compared to bundled Firefox in Ubuntu:
           firefox   8779 Full RELRO        Canary found           NX
 enabled    PIE enabled

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5024>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online