Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Aug 2014 10:58:47 -0500
From:      Bryan Drewery <bdrewery@FreeBSD.org>
To:        FreeBSD Ports <freebsd-ports@freebsd.org>
Subject:   Re: [CFT] SSP Package Repository available
Message-ID:  <53F61737.5030603@FreeBSD.org>
In-Reply-To: <20140821103157.1484034b@scorpio>
References:  <523D79CD.2090302@FreeBSD.org> <53F4CE0E.8040106@FreeBSD.org> <1408629946.2442.136.camel@marcopolo.fritz.box> <20140821103157.1484034b@scorpio>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 8/21/2014 9:31 AM, Jerry wrote:
> On Thu, 21 Aug 2014 16:05:46 +0200, Mathias Picker stated:
>=20
>> On Mi, 2014-08-20 at 11:34 -0500, Bryan Drewery wrote:
>>> On 9/21/2013 5:49 AM, Bryan Drewery wrote:
>>>> Ports now support enabling Stack Protector [1] support on FreeBSD 10=

>>>> i386 and amd64, and older releases on amd64 only currently.
>>>>
>>>> Support may be added for earlier i386 releases once all ports proper=
ly
>>>> respect LDFLAGS.
>>>>
>>>> To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all=
 ports.
>>>>
>>>> The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-a=
ll
>>>> may optionally be set instead.
>>>>
>>>> Please help test this on your system. We would like to eventually en=
able
>>>> this by default, but need to identify any major ports that have run-=
time
>>>> issues due to it.
>>>>
>>>> [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection
>=20
> I always build my own ports, I don't use pre-compiled packages. If I pl=
ace
> "WITH_SSP=3Dyes" in the /etc/make.conf" file, do I still have to rebuil=
d all
> the ports on my system? I am running FreeBSD-10 amd64.
>=20

Only things built after adding WITH_SSP_PORTS=3Dyes will have SSP enabled=
=2E
(WITH_SSP works too but is not the official name anymore).

--=20
Regards,
Bryan Drewery


--SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)

iQEcBAEBAgAGBQJT9hc3AAoJEDXXcbtuRpfP9HMIAMLcBsfV6/Bm2koX9msR9kZi
ChgBtaL4UpDhJhsOZ1el2spbfoZfZL8QDmHfSUoUSl0VB9hzoUlCHmgvrEb9ZhXl
YkCNiffqIAMRzwzE83pK6O45ETZaNlNuoII2XsFcTlao9Rvv5AASJBS0+N+pr/2I
FQ5n+mB+NEXkOxluGW12TpeA5+u4/oIL3JHZLhTqGShzhnCbrDPdU4ykHzGfDMLA
DM1HpMpfyGNZL6x8zLDAnh7YfcNqhsjDb446L8Sq161zWRrS7KDOyc/H3EZKxro3
qDu594vJHb3mtFF81LmeK46aTkhFJbNUtIBEerrw+DIA5JiC0Ndk8J+2E63l7Gc=
=R77V
-----END PGP SIGNATURE-----

--SkawJUo7ORnkqd4qKUmEHbug9qPSCfFgH--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53F61737.5030603>