From owner-freebsd-ports@FreeBSD.ORG Thu Aug 21 15:58:54 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E905919C for ; Thu, 21 Aug 2014 15:58:54 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B1D7D367C for ; Thu, 21 Aug 2014 15:58:54 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.9/8.14.9) with ESMTP id s7LFwsDI049156 for ; Thu, 21 Aug 2014 15:58:54 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.9/8.14.9/Submit) id s7LFwsxU049155 for freebsd-ports@freebsd.org; Thu, 21 Aug 2014 15:58:54 GMT (envelope-from bdrewery) Received: (qmail 32921 invoked from network); 21 Aug 2014 10:58:53 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Aug 2014 10:58:53 -0500 Message-ID: <53F61737.5030603@FreeBSD.org> Date: Thu, 21 Aug 2014 10:58:47 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.0 MIME-Version: 1.0 To: FreeBSD Ports Subject: Re: [CFT] SSP Package Repository available References: <523D79CD.2090302@FreeBSD.org> <53F4CE0E.8040106@FreeBSD.org> <1408629946.2442.136.camel@marcopolo.fritz.box> <20140821103157.1484034b@scorpio> In-Reply-To: <20140821103157.1484034b@scorpio> OpenPGP: id=6E4697CF; url=http://www.shatow.net/bryan/bryan2.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2014 15:58:55 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 8/21/2014 9:31 AM, Jerry wrote: > On Thu, 21 Aug 2014 16:05:46 +0200, Mathias Picker stated: >=20 >> On Mi, 2014-08-20 at 11:34 -0500, Bryan Drewery wrote: >>> On 9/21/2013 5:49 AM, Bryan Drewery wrote: >>>> Ports now support enabling Stack Protector [1] support on FreeBSD 10= >>>> i386 and amd64, and older releases on amd64 only currently. >>>> >>>> Support may be added for earlier i386 releases once all ports proper= ly >>>> respect LDFLAGS. >>>> >>>> To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all= ports. >>>> >>>> The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-a= ll >>>> may optionally be set instead. >>>> >>>> Please help test this on your system. We would like to eventually en= able >>>> this by default, but need to identify any major ports that have run-= time >>>> issues due to it. >>>> >>>> [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection >=20 > I always build my own ports, I don't use pre-compiled packages. If I pl= ace > "WITH_SSP=3Dyes" in the /etc/make.conf" file, do I still have to rebuil= d all > the ports on my system? I am running FreeBSD-10 amd64. >=20 Only things built after adding WITH_SSP_PORTS=3Dyes will have SSP enabled= =2E (WITH_SSP works too but is not the official name anymore). --=20 Regards, Bryan Drewery --SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJT9hc3AAoJEDXXcbtuRpfP9HMIAMLcBsfV6/Bm2koX9msR9kZi ChgBtaL4UpDhJhsOZ1el2spbfoZfZL8QDmHfSUoUSl0VB9hzoUlCHmgvrEb9ZhXl YkCNiffqIAMRzwzE83pK6O45ETZaNlNuoII2XsFcTlao9Rvv5AASJBS0+N+pr/2I FQ5n+mB+NEXkOxluGW12TpeA5+u4/oIL3JHZLhTqGShzhnCbrDPdU4ykHzGfDMLA DM1HpMpfyGNZL6x8zLDAnh7YfcNqhsjDb446L8Sq161zWRrS7KDOyc/H3EZKxro3 qDu594vJHb3mtFF81LmeK46aTkhFJbNUtIBEerrw+DIA5JiC0Ndk8J+2E63l7Gc= =R77V -----END PGP SIGNATURE----- --SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH--