#1780 F28 System Wide Change: Annobin
Closed: Fixed 6 years ago Opened 6 years ago by jkurik.

This change causes extra information to be stored in binary files compiled by gcc. This information can be used by scripts to check on various features of the file, such as the hardening options used or potential ABI conflicts.


Metadata Update from @jkurik:
- Issue tagged with: meeting

6 years ago

This will be discussed in this week's FESCo meeting, on 2017-10-06 at 16:00:00 UTC in #fedora-meeting.

From FESCo Meeting 2017-10-13

#agreed APPROVED: F28 System Wide Change: Annobin (+1:8, -1:0, +0:0)

FESCo would like to request an estimate of how much larger each binary will be so we can make an educated estimate on how much larger this will make the Everything repo.

CC: @nickc

Metadata Update from @maxamillion:
- Issue untagged with: meeting

6 years ago

Executive summary: The plugin will add ~4% to the size of the Everything repo.

Details: The plugin adds about ~250 bytes to every object file. (More if the file being compiled uses function attributes to override the optimization options passed to the compiler on the command line). Given that objcopy is not being used to merge these notes in linked binaries, this means an extra ~250 bytes per object file involved in the creation of a library/executable.

In practical terms this generally means the bigger the binary, the bigger the size increase. So for example /usr/bin/gcc is made up of about 100 object files, and sees a ~2.5% increase in size. Whereas the libc library contains ~1000 files and sees an increase of ~6% in size.

On a side note - the original method of applying this change (patching the redhat-rpm-config package) has proven to be broken. I am currently trying to find an alternative method of enabling the plugin, but so far have had no luck.

Metadata Update from @sgallagh:
- Issue tagged with: meeting

6 years ago

FESCo doesn't see any problems with the 4% increase in repodata (sgallagh, 16:44:35)

Metadata Update from @sgallagh:
- Issue close_status updated to: Fixed

6 years ago

Login to comment on this ticket.

Metadata