From owner-freebsd-security@FreeBSD.ORG  Fri Apr 18 14:38:50 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DF55837B401
	for <freebsd-security@freebsd.org>;
	Fri, 18 Apr 2003 14:38:50 -0700 (PDT)
Received: from grayson.netsweng.com (grayson.netsweng.com [207.235.77.4])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 02EC243FB1
	for <freebsd-security@freebsd.org>;
	Fri, 18 Apr 2003 14:38:50 -0700 (PDT)
	(envelope-from anderson@netsweng.com)
Received: from trantor.stuart.netsweng.com (h244.91.213.151.ip.alltel.net
	[151.213.91.244])
	by grayson.netsweng.com (8.12.9/8.12.7) with ESMTP id h3ILcmoQ032628
	for <freebsd-security@freebsd.org>;
	Fri, 18 Apr 2003 17:38:48 -0400 (EDT)
	(envelope-from anderson@netsweng.com)
Date: Fri, 18 Apr 2003 17:38:47 -0400 (EDT)
From: Stuart Anderson <anderson@netsweng.com>
X-X-Sender: anderson@trantor.stuart.netsweng.com
To: freebsd-security@freebsd.org
In-Reply-To: <20030412073836.GA86038@rot13.obsecurity.org>
Message-ID: <20030418173713.C87664@trantor.stuart.netsweng.com>
References: <20030411111302.G4749@cvs.imp.ch>
	<20030411115522.I6045@odysseus.silby.com>
	<20030412073836.GA86038@rot13.obsecurity.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: fstack protector
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Apr 2003 21:38:51 -0000

On Sat, 12 Apr 2003, Kris Kennaway wrote:

> That's the best solution for FreeBSD.  You'd just set CC and CFLAGS if
> you want to build with it, as usual.  Be aware that some ports will
> not run when built with -fstack-protector, last time I checked
> (XFree86 is one).

Do you recall what the problem is with XFree86? Is it client side, or in
the server? My guess would be that some additional runtime support is needed
in the module loader in the server.


                                Stuart

Stuart R. Anderson                               anderson@netsweng.com
Network & Software Engineering                   http://www.netsweng.com/
1024D/37A79149:                                  0791 D3B8 9A4C 2CDC A31F
                                                 BD03 0A62 E534 37A7 9149