Date: Sat, 21 Sep 2013 19:28:25 -0500 From: Bryan Drewery <bdrewery@FreeBSD.org> To: freebsd-ports@freebsd.org Subject: Re: [CFT/HEADSUP] Ports now have Stack Protector support Message-ID: <523E39A9.7060504@FreeBSD.org> In-Reply-To: <523D792D.3060704@FreeBSD.org> References: <523D792D.3060704@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 9/21/2013 5:47 AM, Bryan Drewery wrote: > Ports now support enabling Stack Protector [1] support on FreeBSD 10 > i386 and amd64, and older releases on amd64 only currently. >=20 > Support may be added for earlier i386 releases once all ports properly > respect LDFLAGS. >=20 > To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all po= rts. Please use WITH_SSP_PORTS now. WITH_SSP will hit some issues when running 'make installworld'. I have a pending fix for that for current, but it will still be an issue in existing releases / 9.2. >=20 > The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all > may optionally be set instead. >=20 > Please help test this on your system. We would like to eventually enabl= e > this by default, but need to identify any major ports that have run-tim= e > issues due to it. >=20 > [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection >=20 --=20 Regards, Bryan Drewery --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSPjmpAAoJEG54KsA8mwz5MKEQAKfJKWhodpKFuwf9mRWC1f22 SOSVXtRV39WeYTrCWzV//k+sR0HNg7OK9qcYyFGIOU4Y0FKvgzU9OYtXKS537sDF C9eZrzVXajk0LO3/A2Zx3h9Muv1UFKwcCzpbiLpFPniLWBSkIM3YOYRTA//UUvkw 3Sw7kMAPYQXRHjrkvrnE5yJU9ALT1LmsdZUNSpPo+h1GF63bwUwqzV1aKj3s9ckr CSQibM3egRTq2rfVY5iGYyKQLiQarvzHNDK50809tvcmVD3sMPBvJPtgJIx6Rrbd CSYohsYZRQ5c1/m37D3ZYjyUCDtQkGT7O06lvR8bpGovU92WgoEBhOz34HQkq7e2 LOW7vAW7sW7kJASB+AfOryE52Y3MXvMkCpnvfP8Bj/mUSMiLPgNDO6xBEYtQqBuw /axOCjZsudLe//1KH3QGXgu9hOLzS36p/QAmLeWW/F4J1mcypglYEyCR1kbmuM+Z hv4TQrSeJlN3HUitS1mROpGfLHiONEleTb+p2pdZGrDq7N4cZMhLR66GiP/auTLg mhfd3u9XEF48c6tEVJbEKmfrlFqOZlQUFGpuSbppyQOBCE/1Zw9poT1QN/qoCTL9 KcWW8bvNBECHK4YSn/WAAcBBxqo+kZOE+KGWKcR38FUxtX8RfBKn55A9K/O5e0oT 2SoDNo1nyNk8hboYWBRb =tn8Q -----END PGP SIGNATURE----- --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?523E39A9.7060504>