Port-amd64 archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Turning on stack protection by default



Matthias Scheler <tron%zhadum.org.uk@localhost> wrote:
> On Sun, Oct 25, 2009 at 01:08:14AM +0200, Joerg Sonnenberger wrote:
> > Please do. I would actually suggest to make it the default on all ports
> > that are not heavily space constraint. Benchmarks in the past suggest
> > that the overhead for typical applications is between 1% and 5%.
> 
> And the worst case seems to be 8%. Such numbers are however not good
> enough for "certain people".

Perhaps enabling it on services/daemons (e.g. postfix, bind) would make
you feel better?

-- 
Mindaugas


Home | Main Index | Thread Index | Old Index