From owner-freebsd-current@FreeBSD.ORG Thu Aug 21 10:35:05 2014 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B572672E; Thu, 21 Aug 2014 10:35:05 +0000 (UTC) Received: from mail.ijs.si (mail.ijs.si [IPv6:2001:1470:ff80::25]) by mx1.freebsd.org (Postfix) with ESMTP id 5E8EE346B; Thu, 21 Aug 2014 10:35:05 +0000 (UTC) Received: from amavis-proxy-ori.ijs.si (localhost [IPv6:::1]) by mail.ijs.si (Postfix) with ESMTP id 3hf2LH53VdzCQ; Thu, 21 Aug 2014 12:35:03 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ijs.si; h= user-agent:message-id:references:in-reply-to:organization :subject:subject:from:from:date:date:content-transfer-encoding :content-type:content-type:mime-version:received:received :received:received; s=jakla2; t=1408617299; x=1411209300; bh=XDy P9fcubail9xd6vXYf0j/6P2hOckeSAEt+11alrHA=; b=Gj/ZGj2W3USAinS+J58 8nI25UyWWtTnsDJ9BmYSyZMN975UbvEITltqziM7zoZ0Ud1Lwy0BNu+eRfgOCYl9 VxKK47TYQncmDVuTwS30KXwmrbyc+73oNhVCpsirrL9SI6cX1V3lhPCpJeY5O0F7 UI9v6xX2DvKoalHYEI5x8Fjc= X-Virus-Scanned: amavisd-new at ijs.si Received: from mail.ijs.si ([IPv6:::1]) by amavis-proxy-ori.ijs.si (mail.ijs.si [IPv6:::1]) (amavisd-new, port 10012) with ESMTP id S3jWCBm9uQeA; Thu, 21 Aug 2014 12:34:59 +0200 (CEST) Received: from mildred.ijs.si (mailbox.ijs.si [IPv6:2001:1470:ff80::143:1]) by mail.ijs.si (Postfix) with ESMTP; Thu, 21 Aug 2014 12:34:59 +0200 (CEST) Received: from neli.ijs.si (neli.ijs.si [IPv6:2001:1470:ff80:88:21c:c0ff:feb1:8c91]) by mildred.ijs.si (Postfix) with ESMTP id 3hf2LC558Pz6M; Thu, 21 Aug 2014 12:34:59 +0200 (CEST) Received: from sleepy.ijs.si ([2001:1470:ff80:e001::1:1]) by neli.ijs.si with HTTP (HTTP/1.1 POST); Thu, 21 Aug 2014 12:34:59 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 21 Aug 2014 12:34:59 +0200 From: Mark Martinec To: freebsd-ports@freebsd.org Subject: Re: [CFT] SSP Package Repository available Organization: J. Stefan Institute In-Reply-To: References: <523D79CD.2090302@FreeBSD.org> <53F4CE0E.8040106@FreeBSD.org> Message-ID: X-Sender: Mark.Martinec+freebsd@ijs.si User-Agent: Roundcube Webmail/1.0.2 Cc: freebsd-current@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2014 10:35:05 -0000 Bryan Drewery wrote: > Ports now support enabling Stack Protector [1] support on FreeBSD 10 > i386 and amd64, and older releases on amd64 only currently. > > Support may be added for earlier i386 releases once all ports properly > respect LDFLAGS. > > To enable, just add WITH_SSP=yes to your make.conf and rebuild all > ports. > > The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all > may optionally be set instead. That's probably SSP_CFLAGS, not SSP_CLFAGS. Does clang (in 10-STABLE or CURRENT) support also the option -fstack-protector-strong ? Is 'world' by default compiled with -fstack-protector (and if not, why not). Mark