Subject: Re: Building without SSP (was: CVS commit: src/include (_FORTIFY_SOURCE))
To: None <current-users@NetBSD.org>
From: Krister Walfridsson <cato@df.lth.se>
List: current-users
Date: 08/04/2007 20:46:27
On Sat, 4 Aug 2007, Bernd Ernesti wrote:
> On Sat, Aug 04, 2007 at 07:51:26PM +0200, Krister Walfridsson wrote:
>>
>> This is wrong, as it affects what get included in libc.  I'll fix it
>> the correct way.
>
> Hmm, I would expect that no ssp code would be build if I use the following in
> /etc/mk.conf:
>
> USE_FORT = no
> USE_SSP = no

This means that the system binaries will not be protected.  The libc
will however still export the necessary support functions to let 3rd
party software take advantage of the SSP/FORTIFY mechanisms.

    /Krister