Re: HEADS-UP: Stack Smash Protection enabled by default for amd64 and i386

[Matthias Scheler <tron%NetBSD.org@localhost>]

On Thu, Nov 12, 2009 at 05:50:21AM +0000, YAMAMOTO Takashi wrote:
> > I've just enabled Stack Smash Protection by default for NetBSD/amd64
> > and NetBSD/i386 in current. As a result kernels and userland will be
> > build with "-fstack-protector" and eventually also "-Wstack-protector".
> > I've tested full release builds of both ports on a NetBSD/i386 machine
> > which uses SSP userland and kernel.
> > 
> > SSP will result in a slowdown of about 5%, please read this thread
> > for more details:
> > 
> >     http://mail-index.netbsd.org/port-i386/2009/10/18/msg001465.html
> > 
> > You can still build NetBSD/amd64 and NetBSD/i386 with SSP turned off
> > by adding "USE_SSP=no" to "/etc/mk.conf" or by using the command line
> > argument "-V USE_SSP=no" when invoking "build.sh".
> 
> is there a way to achieve the same as the previous default?
> ie. enable it only for libc etc.

I don't think so.

        Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/