From owner-freebsd-current@FreeBSD.ORG Thu Aug 21 15:53:41 2014 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 566929FB for ; Thu, 21 Aug 2014 15:53:41 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 365BF3608 for ; Thu, 21 Aug 2014 15:53:41 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.9/8.14.9) with ESMTP id s7LFrfNP048993 for ; Thu, 21 Aug 2014 15:53:41 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.9/8.14.9/Submit) id s7LFrfF0048992 for freebsd-current@freebsd.org; Thu, 21 Aug 2014 15:53:41 GMT (envelope-from bdrewery) Received: (qmail 71906 invoked from network); 21 Aug 2014 10:53:35 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Aug 2014 10:53:35 -0500 Message-ID: <53F615FA.6030604@FreeBSD.org> Date: Thu, 21 Aug 2014 10:53:30 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.0 MIME-Version: 1.0 To: Mark Martinec , freebsd-ports@freebsd.org Subject: Re: [CFT] SSP Package Repository available References: <523D79CD.2090302@FreeBSD.org> <53F4CE0E.8040106@FreeBSD.org> In-Reply-To: OpenPGP: id=6E4697CF; url=http://www.shatow.net/bryan/bryan2.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="L1d2c6nOepHLleWSrekLTAvqL04Om3dD6" Cc: freebsd-current@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2014 15:53:41 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 8/21/2014 5:34 AM, Mark Martinec wrote: > Bryan Drewery wrote: >> Ports now support enabling Stack Protector [1] support on FreeBSD 10 >> i386 and amd64, and older releases on amd64 only currently. >> >> Support may be added for earlier i386 releases once all ports properly= >> respect LDFLAGS. >> >> To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all p= orts. >> >> The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all= >> may optionally be set instead. >=20 > That's probably SSP_CFLAGS, not SSP_CLFAGS. Nice find. >=20 >=20 > Does clang (in 10-STABLE or CURRENT) support also the > option -fstack-protector-strong ? Not sure if clang 3.4 has it, but I found a patch for it here: https://github.com/archlinuxarm/PKGBUILDs/blob/master/extra/llvm/clang-3.= 4-fstack-protector-strong.patch >=20 > Is 'world' by default compiled with -fstack-protector > (and if not, why not). World has been built with -fstack-protector by default since 2008. At least in 8.0+. >=20 > Mark > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.o= rg" --=20 Regards, Bryan Drewery --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJT9hX6AAoJEDXXcbtuRpfP3+kH/09KAmslS64jiMpM2X0VttAo S/f1J87gCQnIdNbH5NWwZjHxBWOuaSoMnMywVqX1v5YirINi2kmmWAqD6owmjdux ZlvfK7Ne9u1eGJE4adHnoNPsqpDH5rKK/fKvbD1H6KClJkD3+Eo4hMpGF4a5rgQT +RawXpJEC4xR3dFoP6rM7BPHwrkVYJdpcB7xluycuJa4URZtjML7Ps1Mf/QMmohQ fz9m2eTnGATBlyWXeoBo7lhrS12O8CXCx+cHqQ/dMFAzHU/ux3A/Pa3cXxMx7T8J Z3kZCBZNqFuIC8BGMWL5Bs8/YqQrA+G/TUliVE+Hmj2hkB8jaNHn19aR+r4IyA8= =5zS+ -----END PGP SIGNATURE----- --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6--