From owner-freebsd-security@FreeBSD.ORG Fri Dec 28 01:23:09 2007 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 99BE516A418 for ; Fri, 28 Dec 2007 01:23:09 +0000 (UTC) (envelope-from kabaev@gmail.com) Received: from hs-out-2122.google.com (hs-out-0708.google.com [64.233.178.244]) by mx1.freebsd.org (Postfix) with ESMTP id 4812113C461 for ; Fri, 28 Dec 2007 01:23:09 +0000 (UTC) (envelope-from kabaev@gmail.com) Received: by hs-out-2122.google.com with SMTP id j58so2620496hsj.11 for ; Thu, 27 Dec 2007 17:23:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:cc:subject:message-id:in-reply-to:references:x-mailer:mime-version:content-type; bh=7NNMXLrcWrzQw5el5aXjYLjVDY+pdHxWUPGgntDF5ww=; b=PPanUXVUibvq890xVtw8sOgTGZ9CXrEVJWPM0wev0kv6N5caJ8xhlcuxj9KMtYFiIZ6JQyskQa7Q3FCh7qR9J8dW3OGbD2K8bg9SV/CBHZpxOjXKO5qwySb1aO6SzIBHzgd3+m2F21tuEUCcMdwsw2iG4QfvaAx4Lj5LjvgQUtE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=date:from:to:cc:subject:message-id:in-reply-to:references:x-mailer:mime-version:content-type; b=jfqREBC/+O5lkCzgyESvPclMvwNh/PLmBl0u6FvqoDnOpxX/v7rs0bKjQ53MPjDL0Pz+HC4c6dHgnlikNXU49aNUyGdv5CXZySdRdGXq2Wc9hVBUTfh5rwNNCebnR8AIf9pP3VKeIujaFdJgP1ltXP+S4OoNJNr/3364YOJ4jxU= Received: by 10.150.54.6 with SMTP id c6mr2409130yba.43.1198803520970; Thu, 27 Dec 2007 16:58:40 -0800 (PST) Received: from kan.dnsalias.net ( [24.218.183.247]) by mx.google.com with ESMTPS id i38sm33945711wxd.16.2007.12.27.16.58.39 (version=SSLv3 cipher=OTHER); Thu, 27 Dec 2007 16:58:40 -0800 (PST) Date: Thu, 27 Dec 2007 19:58:33 -0500 From: Alexander Kabaev To: Dag-Erling =?utf-8?Q?Sm=C3=B8rgrav?= Message-ID: <20071227195833.154b41ae@kan.dnsalias.net> In-Reply-To: <86myrvhht9.fsf@ds4.des.no> References: <477277FF.30504@googlemail.com> <86myrvhht9.fsf@ds4.des.no> X-Mailer: Claws Mail 3.0.2 (GTK+ 2.12.1; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/LKw0X7NIO2GYv=l5wQ4iB_a"; protocol="application/pgp-signature"; micalg=PGP-SHA1 Cc: Gunther Mayer , freebsd-security@freebsd.org Subject: Re: ProPolice/SSP in 7.0 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Dec 2007 01:23:09 -0000 --Sig_/LKw0X7NIO2GYv=l5wQ4iB_a Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On Thu, 27 Dec 2007 23:52:02 +0100 Dag-Erling Sm=C3=B8rgrav wrote: > Gunther Mayer writes: > > I've known about ProPolice/SSP for a while now (from the Gentoo > > world) and am aware that FreeBSD 7.0 doesn't yet support it though > > I know of Jeremy Le Hen's patches > > (http://tataz.chchile.org/~tataz/FreeBSD/SSP/). >=20 > Wrong. FreeBSD 7 has had SSP support since May; the patch you mention > just turns it on by default. You can probably achieve the same effect > by adding -fstack-protector to CFLAGS and COPTFLAGS in make.conf. >=20 > DES > --=20 > Dag-Erling Sm=C3=B8rgrav - des@des.no Wrong. Actually, FreeBSD 7 _compiler_ has SSP support, but a lot of necessary changes from Jeremy to enable it by default for 'make buildworld' and allow switching of SSP on/off for subsequent builds never made it to the tree. --=20 Alexander Kabaev --Sig_/LKw0X7NIO2GYv=l5wQ4iB_a Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFHdEo5Q6z1jMm+XZYRAlS7AKCDXMNHhD1MfkiMtYjb9C9l1CHWKQCg7K7R gJxf0JPhDDLgv2IFjkK1yNA= =Y8qJ -----END PGP SIGNATURE----- --Sig_/LKw0X7NIO2GYv=l5wQ4iB_a--