After building and installing all the built packages (including -debuginfo and -debugsources), annocheck -v reports no FAILs or MAYBs on my system.

This doesn't mean that .NET Core has been completely hardened. annocheck can only partially check binaries produced by non-gcc compilers. It requires code to have been compiled by gcc to be able to accurately verify binaries. Additionally, clang lacks several hardening flags.

For more information about annocheck, see: https://developers.redhat.com/blog/2019/02/04/annocheck-examining-the-contents-of-binary-files/

There is also some support for building on Fedora 32, but it's currently blocked by corefx RID issues being discussed upstream.

Build: https://copr.fedorainfracloud.org/coprs/g/dotnet-sig/dotnet/build/1062244/