From: Jin-gyu Kim <jin-gyu.kim@samsung.com>
Date: Wed, 23 Jun 2021 04:06:25 +0000 (+0900)
Subject: Add aslr exception lists.
X-Git-Tag: submit/tizen/20210623.223540^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F41%2F260241%2F2;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Add aslr exception lists.

- Some executables are included in packages not being compiled.
- In these cases, applying PIE option is not available.

Change-Id: I20b2da508ad01a9beeb0c497ed1086533da460ea
---

diff --git a/test/aslr_test/scripts/aslr_exception.list b/test/aslr_test/scripts/aslr_exception.list
index eb767ee..bbd4aef 100644
--- a/test/aslr_test/scripts/aslr_exception.list
+++ b/test/aslr_test/scripts/aslr_exception.list
@@ -1,4 +1,16 @@
+# ldconfig, glibc_post_upgrade : static binary
 /usr/sbin/ldconfig
 /usr/sbin/glibc_post_upgrade
+# qemu-arm-binfmt : only used for mic build
 /usr/bin/qemu-arm-binfmt
+# containerd ~ docker-proxy : golang pre-built binary
+/usr/bin/containerd
+/usr/bin/containerd-shim-runc-v2
+/usr/bin/docker
+/usr/bin/docker-init
+/usr/bin/runc
+/usr/bin/containerd-shim
+/usr/bin/ctr
+/usr/bin/dockerd
+/usr/bin/docker-proxy
 # last line