From owner-freebsd-ports-announce@FreeBSD.ORG Sat Sep 21 10:49:58 2013 Return-Path: Delivered-To: ports-announce@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 3788F590 for ; Sat, 21 Sep 2013 10:49:58 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id F3DA427F4 for ; Sat, 21 Sep 2013 10:49:57 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r8LAnvPw097831 for ; Sat, 21 Sep 2013 10:49:57 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r8LAnvSL097830 for ports-announce@FreeBSD.org; Sat, 21 Sep 2013 10:49:57 GMT (envelope-from bdrewery) Received: (qmail 32364 invoked from network); 21 Sep 2013 05:49:56 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Sep 2013 05:49:56 -0500 Message-ID: <523D79CD.2090302@FreeBSD.org> Date: Sat, 21 Sep 2013 05:49:49 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: ports-announce@FreeBSD.org X-Enigmail-Version: 1.5.2 OpenPGP: id=3C9B0CF9; url=http://www.shatow.net/bryan/bryan.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="k0o0tf1pDQKxc6iok5oxTVqnEvpEgXlGX" X-Mailman-Approved-At: Sat, 21 Sep 2013 11:58:36 +0000 Subject: [FreeBSD-Ports-Announce] [CFT/HEADSUP] Ports now have Stack Protector support X-BeenThere: freebsd-ports-announce@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Important news and instructions about the FreeBSD " ports collection" \[moderated\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Sep 2013 10:49:58 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --k0o0tf1pDQKxc6iok5oxTVqnEvpEgXlGX Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Ports now support enabling Stack Protector [1] support on FreeBSD 10 i386 and amd64, and older releases on amd64 only currently. Support may be added for earlier i386 releases once all ports properly respect LDFLAGS. To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all port= s. The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all may optionally be set instead. Please help test this on your system. We would like to eventually enable this by default, but need to identify any major ports that have run-time issues due to it. [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection --=20 Regards, Bryan Drewery --k0o0tf1pDQKxc6iok5oxTVqnEvpEgXlGX Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSPXnNAAoJEG54KsA8mwz53hQP/i4yFrUTcttucSeXiyluD3tJ pJ10EWm46ei49XXe7f1oVF+QNDQWneoQzUa7ktg/+Egw8y2z/3ZhvwrBZDRH/xNY xtkfmrdAraQg+wx/lvU27wXdTouGpqumCRuI/IrdxCWMMJIRPf46qpKiCkpkrxwF NP/SPQw7Ma5T0Tt5r5WmLsnOfp6MjHb0aIHis8NKS+nbLexI6ZDqoqpQOhv3DjFo ZE3zvr0PS/DodxcoGWBzy2BEbNDoVVQZhPhRUSskWZe7j8J1v1WOtSqN6kZoMZvi IzWCq//v/yNazuhSx3RwOX1fjJHGpssZmhZJM0DwsOeO0C5L37Df0phKvcFlZuUq BSlRaVCYjxTwwQf/0IzuRwYMpUGmlE+DSSm5my8G2Ok1CEHk4WEq2nfv8k72qgjo TdF+OuS0ofdLJXQ2zpyHwzOaBhD8BhGfFB/nmQs3mXvvQPEe7lXjUVVWyJ6uvwZJ G7jmFohDNp5Re8aZG/eJn1g7RhgsDu/XQYQ4frXKcpZFFbWrflH5l7ylG2y+4aQt HrPsJWJD1bSm4hNs3PF1IhJyFDjSNlWRngy4rwVztaxlkaWsrxqZf9/R/tnU/YEa iU4yUgRqwNzYrDy1bO8xsS1fdSQttbob/zCjtHweaWE8oYcneLM33Owkmv8BI0N0 XszQaJ+2u6V/Op7Vts9m =gYvh -----END PGP SIGNATURE----- --k0o0tf1pDQKxc6iok5oxTVqnEvpEgXlGX--