Zsh Mailing List Archive
Messages sorted by: Reverse Date, Date, Thread, Author

Re: [Bug] modules zsh/tcp, zsh/zftp unloadable, probably affecting most modern Linuxes

It seems using linker options '-z relro -z now' is now a widely
used way for enhancing security; see for example:
https://www.redhat.com/ja/blog/hardening-elf-binaries-using-relocation-read-only-relro

Both RedHat/Fedora/CentOS and Debian/Ubuntu are now using
these options by default.

zsh rpm for Fedora 'gcc ... -z lazy' for overriding '-z now'.
# this is not working now, but '-Wl,-z,lazy' would work.

It seems Debian zsh package does not try to override '-z now'.

Whether accepting '-z lazy' or not is up to the distribution,
but if using '-z lazy' (partial RELRO) is not recommended
from security point of view, then we can just document that
net/tcp must be loaded before zftp.
Messages sorted by: Reverse Date, Date, Thread, Author