Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Feb 2013 22:00:33 -0500
From:      Eitan Adler <lists@eitanadler.com>
To:        Kimmo Paasiala <kpaasial@gmail.com>
Cc:        freebsd-stable@freebsd.org, FreeBSD current <freebsd-current@freebsd.org>, Dimitry Andric <dim@freebsd.org>
Subject:   Re: CLANG and -fstack-protector
Message-ID:  <CAF6rxg=JXENPiGDZPjpoCEakGPnrCOg4GfxVDHfvo_8XB%2BUFxw@mail.gmail.com>
In-Reply-To: <CA%2B7WWSfq1rv5gNsBGVa-O4ah_bZt%2B7w=UTBYdq4fZEMxsFwtMw@mail.gmail.com>
References:  <CA%2B7WWSeFh9sJyo3kKD5wTEHoyTSjR6TuDDgDCV5Nhc_wMzVUkg@mail.gmail.com> <51141769.5060905@FreeBSD.org> <CA%2B7WWSfq1rv5gNsBGVa-O4ah_bZt%2B7w=UTBYdq4fZEMxsFwtMw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 7 February 2013 18:40, Kimmo Paasiala <kpaasial@gmail.com> wrote:
>> Ports are largely independent of the base system, and their compilation
>> flags are different from port to port.  You could set -fstack-protector
>> for your ports in either make.conf or ports.conf, if you wanted.
>
> Is there any work being done to provide an optional Makefile knob
> (WITH_STACK_PROTECTOR ?) to turn on -fstack-protector for ports that
> install network services (or other critical code)? I'd bet such
> feature would be popular.

As far as I am aware no such feature exists.  In any case it would be
subject to the same problem of many ports ignoring CFLAGS and friends.


-- 
Eitan Adler



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAF6rxg=JXENPiGDZPjpoCEakGPnrCOg4GfxVDHfvo_8XB%2BUFxw>