Re: HEADS-UP: Stack Smash Protection enabled by default for amd64 and i386

[Matthias Scheler <tron%NetBSD.org@localhost>]

On Thu, Nov 12, 2009 at 02:58:01PM +0100, Geert Hendrickx wrote:
> > USE_SSP_DEFAULT=no  Old behavior where "libc" and certain daemons
> >                     (e.g. "ypserv") get built with SSP, but the
> >                     rest of the source tree (including kernels)
> >                     get built without SSP.
> > 
> > USE_SSP=no          Turn off SSP completely. This is however *not*
> >                     the previous behaviour
> 
> 
> 
> Isn't it a bit more elegant to use just one flag with more possible values?
> eg. USE_SSP=yes/no/some, where "some" mathes the old default?

I've considered that. But I find it very confusing when things that
were boolean settings suddenly gain extra values.(*)

        Kind regards

(*) http://thedailywtf.com/Articles/What_Is_Truth_0x3f_.aspx

-- 
Matthias Scheler                                  http://zhadum.org.uk/