Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8173941

SA does not work if executable is DSO

    Details

    • Subcomponent:
      svc
    • Resolved In Build:
      b159
    • OS:
      linux

      Backports

        Description

        http://mail.openjdk.java.net/pipermail/serviceability-dev/2017-February/020940.html

        In modern Linux e.g. Fedora 25, executables are built as DSO for security [1].
        java command in OpenJDK which is provided by distribution is also DSO.
        However, SA does not work with DSO executables.

        Currently, OpenJDK 8 in Fedora25 is built as DSO.
        So I want to contribute this patch to JDK 8 or later release.

        [1] https://fedoraproject.org/wiki/Packaging:Guidelines#PIE

          Activity

          ysuenaga Yasumasa Suenaga created issue -
          Hide
          ysuenaga Yasumasa Suenaga added a comment -
          Suggested fix
          Show
          ysuenaga Yasumasa Suenaga added a comment - Suggested fix
          ysuenaga Yasumasa Suenaga made changes -
          Field Original Value New Value
          Attachment hardened.patch [ 66320 ]
          mlautman Mary Lautman made changes -
          Labels svc-sa
          aph Andrew Haley made changes -
          Assignee Andrew Haley [ aph ]
          aph Andrew Haley made changes -
          Priority P4 [ 4 ] P3 [ 3 ]
          aph Andrew Haley made changes -
          Status New [ 10000 ] Open [ 1 ]
          aph Andrew Haley made changes -
          Fix Version/s 9 [ 14949 ]
          Affects Version/s 9 [ 14949 ]
          simonis Volker Simonis made changes -
          Assignee Andrew Haley [ aph ] Yasumasa Suenaga [ ysuenaga ]
          Hide
          dholmes David Holmes added a comment -
          Moved to hotspot->svc which I think is the right component for the SA.
          Show
          dholmes David Holmes added a comment - Moved to hotspot->svc which I think is the right component for the SA.
          dholmes David Holmes made changes -
          Component/s hotspot [ 10304 ]
          Component/s core-svc [ 10305 ]
          Subcomponent debugger [ 370 ] svc [ 369 ]
          dholmes David Holmes made changes -
          Description http://mail.openjdk.java.net/pipermail/serviceability-dev/2017-February/020940.html

          In modern Linux e.g. Fedora 25, executables are built as DSO for security [1].
          java command in OpenJDK which is provided by distribution is also DSO.
          However, SA does not work with DSO executables.

          Currently, OpenJDK 8 in Fedora25 is built as DSO.
          So I want to contribute this patch to JDK 8 or later release.
          http://mail.openjdk.java.net/pipermail/serviceability-dev/2017-February/020940.html

          In modern Linux e.g. Fedora 25, executables are built as DSO for security [1].
          java command in OpenJDK which is provided by distribution is also DSO.
          However, SA does not work with DSO executables.

          Currently, OpenJDK 8 in Fedora25 is built as DSO.
          So I want to contribute this patch to JDK 8 or later release.

          [1] https://fedoraproject.org/wiki/Packaging:Guidelines#PIE
          Hide
          hgupdate HG Updates added a comment -
          URL: http://hg.openjdk.java.net/jdk9/hs/hotspot/rev/b3d95edd4467
          User: dsamersoff
          Date: 2017-02-13 12:29:48 +0000
          Show
          hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/hs/hotspot/rev/b3d95edd4467 User: dsamersoff Date: 2017-02-13 12:29:48 +0000
          hgupdate HG Updates made changes -
          Status Open [ 1 ] Resolved [ 5 ]
          Resolved In Build team [ 17324 ]
          Resolution Fixed [ 1 ]
          ysuenaga Yasumasa Suenaga made changes -
          Labels svc-sa noreg svc-sa
          dholmes David Holmes made changes -
          Labels noreg svc-sa noreg-hard svc-sa
          Hide
          dholmes David Holmes added a comment -
          noreg-hard. Normal OpenJDK build processes do not build executables as DSO's. This would need a custom build of the JDK to be able to exercise the test.
          Show
          dholmes David Holmes added a comment - noreg-hard. Normal OpenJDK build processes do not build executables as DSO's. This would need a custom build of the JDK to be able to exercise the test.
          hgupdate HG Updates made changes -
          Link This issue backported by JDK-8174987 [ JDK-8174987 ]
          Hide
          hgupdate HG Updates added a comment -
          URL: http://hg.openjdk.java.net/jdk9/jdk9/hotspot/rev/b3d95edd4467
          User: lana
          Date: 2017-03-01 20:18:00 +0000
          Show
          hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/jdk9/hotspot/rev/b3d95edd4467 User: lana Date: 2017-03-01 20:18:00 +0000
          hgupdate HG Updates made changes -
          Resolved In Build team [ 17324 ] master [ 18256 ]
          hgupdate HG Updates made changes -
          Resolved In Build master [ 18256 ] b159 [ 19710 ]
          hgupdate HG Updates made changes -
          Link This issue backported by JDK-8176683 [ JDK-8176683 ]
          andrew Andrew Hughes made changes -
          Labels noreg-hard svc-sa 8bpr-critical-request noreg-hard svc-sa
          andrew Andrew Hughes made changes -
          Labels 8bpr-critical-request noreg-hard svc-sa 8u-CPU-critical-request noreg-hard svc-sa
          pgupta Praveen Gupta made changes -
          Labels 8u-CPU-critical-request noreg-hard svc-sa 8u-CPU-critical-request CPU17_03-critical-SQE-reject noreg-hard svc-sa
          darcy Joe Darcy made changes -
          Link This issue csr of CCC-8173941 [ CCC-8173941 ]
          kkrishnamurt Kavita Krishnamurthy made changes -
          Labels 8u-CPU-critical-request CPU17_03-critical-SQE-reject noreg-hard svc-sa 8u-cpu-critical-reject CPU17_03-critical-SQE-reject noreg-hard svc-sa
          hgupdate HG Updates made changes -
          Link This issue backported by JDK-8183661 [ JDK-8183661 ]

            People

            • Assignee:
              ysuenaga Yasumasa Suenaga
              Reporter:
              ysuenaga Yasumasa Suenaga
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: