From owner-freebsd-ports@FreeBSD.ORG Sun Sep 22 00:28:33 2013 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id BC9376F6 for ; Sun, 22 Sep 2013 00:28:33 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8780C20E3 for ; Sun, 22 Sep 2013 00:28:33 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r8M0SXvE083184 for ; Sun, 22 Sep 2013 00:28:33 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r8M0SXir083182 for freebsd-ports@freebsd.org; Sun, 22 Sep 2013 00:28:33 GMT (envelope-from bdrewery) Received: (qmail 74018 invoked from network); 21 Sep 2013 19:28:32 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Sep 2013 19:28:32 -0500 Message-ID: <523E39A9.7060504@FreeBSD.org> Date: Sat, 21 Sep 2013 19:28:25 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: freebsd-ports@freebsd.org Subject: Re: [CFT/HEADSUP] Ports now have Stack Protector support References: <523D792D.3060704@FreeBSD.org> In-Reply-To: <523D792D.3060704@FreeBSD.org> X-Enigmail-Version: 1.5.2 OpenPGP: id=3C9B0CF9; url=http://www.shatow.net/bryan/bryan.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Sep 2013 00:28:33 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 9/21/2013 5:47 AM, Bryan Drewery wrote: > Ports now support enabling Stack Protector [1] support on FreeBSD 10 > i386 and amd64, and older releases on amd64 only currently. >=20 > Support may be added for earlier i386 releases once all ports properly > respect LDFLAGS. >=20 > To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all po= rts. Please use WITH_SSP_PORTS now. WITH_SSP will hit some issues when running 'make installworld'. I have a pending fix for that for current, but it will still be an issue in existing releases / 9.2. >=20 > The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all > may optionally be set instead. >=20 > Please help test this on your system. We would like to eventually enabl= e > this by default, but need to identify any major ports that have run-tim= e > issues due to it. >=20 > [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection >=20 --=20 Regards, Bryan Drewery --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSPjmpAAoJEG54KsA8mwz5MKEQAKfJKWhodpKFuwf9mRWC1f22 SOSVXtRV39WeYTrCWzV//k+sR0HNg7OK9qcYyFGIOU4Y0FKvgzU9OYtXKS537sDF C9eZrzVXajk0LO3/A2Zx3h9Muv1UFKwcCzpbiLpFPniLWBSkIM3YOYRTA//UUvkw 3Sw7kMAPYQXRHjrkvrnE5yJU9ALT1LmsdZUNSpPo+h1GF63bwUwqzV1aKj3s9ckr CSQibM3egRTq2rfVY5iGYyKQLiQarvzHNDK50809tvcmVD3sMPBvJPtgJIx6Rrbd CSYohsYZRQ5c1/m37D3ZYjyUCDtQkGT7O06lvR8bpGovU92WgoEBhOz34HQkq7e2 LOW7vAW7sW7kJASB+AfOryE52Y3MXvMkCpnvfP8Bj/mUSMiLPgNDO6xBEYtQqBuw /axOCjZsudLe//1KH3QGXgu9hOLzS36p/QAmLeWW/F4J1mcypglYEyCR1kbmuM+Z hv4TQrSeJlN3HUitS1mROpGfLHiONEleTb+p2pdZGrDq7N4cZMhLR66GiP/auTLg mhfd3u9XEF48c6tEVJbEKmfrlFqOZlQUFGpuSbppyQOBCE/1Zw9poT1QN/qoCTL9 KcWW8bvNBECHK4YSn/WAAcBBxqo+kZOE+KGWKcR38FUxtX8RfBKn55A9K/O5e0oT 2SoDNo1nyNk8hboYWBRb =tn8Q -----END PGP SIGNATURE----- --dLgp3mbrTfRuSPNALuEj7x8qOXEWEIIcT--