From owner-freebsd-arch@FreeBSD.ORG Sat Apr 19 07:14:13 2008 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 156B4106564A for ; Sat, 19 Apr 2008 07:14:13 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from mail08.syd.optusnet.com.au (mail08.syd.optusnet.com.au [211.29.132.189]) by mx1.freebsd.org (Postfix) with ESMTP id 9DE4D8FC12 for ; Sat, 19 Apr 2008 07:14:12 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from server.vk2pj.dyndns.org (c220-239-20-82.belrs4.nsw.optusnet.com.au [220.239.20.82]) by mail08.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id m3J7E5w0008144 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 19 Apr 2008 17:14:06 +1000 Received: from server.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1]) by server.vk2pj.dyndns.org (8.14.2/8.14.1) with ESMTP id m3J7E5qo020839; Sat, 19 Apr 2008 17:14:05 +1000 (EST) (envelope-from peter@server.vk2pj.dyndns.org) Received: (from peter@localhost) by server.vk2pj.dyndns.org (8.14.2/8.14.2/Submit) id m3J7E0X5020838; Sat, 19 Apr 2008 17:14:00 +1000 (EST) (envelope-from peter) Date: Sat, 19 Apr 2008 17:14:00 +1000 From: Peter Jeremy To: Jeremie Le Hen Message-ID: <20080419071400.GP73016@server.vk2pj.dyndns.org> References: <20080418132749.GB4840@obiwan.tataz.chchile.org> <200804181945.59189.max@love2party.net> <20080418204738.GE4840@obiwan.tataz.chchile.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="q8dntDJTu318bll0" Content-Disposition: inline In-Reply-To: <20080418204738.GE4840@obiwan.tataz.chchile.org> X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc User-Agent: Mutt/1.5.17 (2007-11-01) Cc: freebsd-arch@freebsd.org Subject: Re: Integration of ProPolice in FreeBSD X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Apr 2008 07:14:13 -0000 --q8dntDJTu318bll0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Apr 18, 2008 at 10:47:38PM +0200, Jeremie Le Hen wrote: >> 1) Add the needed support symbols to libc (they don't hurt anyone, right= ?) > >Actually, they are already in libc :-). >See src/sys/lib/libc/sys/stack_protector.c . /usr/src/lib/libc/sys/stack_protector.c Similar code needs to be added to libkern before SSP can be enabled within the kernel. >Certainly. I would like to hear opinion from other committers if SSP >should be enabled by default. I would agree that a phased approach to enabling SSP is warranted but I believe it should wind up enabled by default in -current fairly rapidly. Once the Project has gained more familiarity with SSP and its impacts, a decision can be made as to whether it should default to on or off in -stable and releases. --=20 Peter Jeremy Please excuse any delays as the result of my ISP's inability to implement an MTA that is either RFC2821-compliant or matches their claimed behaviour. --q8dntDJTu318bll0 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.8 (FreeBSD) iEYEARECAAYFAkgJm7gACgkQ/opHv/APuId7CACfUNSfkH0Cox0TH17XYRFiYsgD lmUAn3jgUZEvZtDY8IxIFUU90xIbBSqv =G8Rw -----END PGP SIGNATURE----- --q8dntDJTu318bll0--