Date: Sat, 19 Apr 2008 17:14:00 +1000 From: Peter Jeremy <peterjeremy@optushome.com.au> To: Jeremie Le Hen <jeremie@le-hen.org> Cc: freebsd-arch@freebsd.org Subject: Re: Integration of ProPolice in FreeBSD Message-ID: <20080419071400.GP73016@server.vk2pj.dyndns.org> In-Reply-To: <20080418204738.GE4840@obiwan.tataz.chchile.org> References: <20080418132749.GB4840@obiwan.tataz.chchile.org> <200804181945.59189.max@love2party.net> <20080418204738.GE4840@obiwan.tataz.chchile.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--q8dntDJTu318bll0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Apr 18, 2008 at 10:47:38PM +0200, Jeremie Le Hen wrote: >> 1) Add the needed support symbols to libc (they don't hurt anyone, right= ?) > >Actually, they are already in libc :-). >See src/sys/lib/libc/sys/stack_protector.c . /usr/src/lib/libc/sys/stack_protector.c Similar code needs to be added to libkern before SSP can be enabled within the kernel. >Certainly. I would like to hear opinion from other committers if SSP >should be enabled by default. I would agree that a phased approach to enabling SSP is warranted but I believe it should wind up enabled by default in -current fairly rapidly. Once the Project has gained more familiarity with SSP and its impacts, a decision can be made as to whether it should default to on or off in -stable and releases. --=20 Peter Jeremy Please excuse any delays as the result of my ISP's inability to implement an MTA that is either RFC2821-compliant or matches their claimed behaviour. --q8dntDJTu318bll0 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.8 (FreeBSD) iEYEARECAAYFAkgJm7gACgkQ/opHv/APuId7CACfUNSfkH0Cox0TH17XYRFiYsgD lmUAn3jgUZEvZtDY8IxIFUU90xIbBSqv =G8Rw -----END PGP SIGNATURE----- --q8dntDJTu318bll0--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080419071400.GP73016>