Re: Improving security for pkgsrc

[Alistair Crooks <alistaircrooks%gmail.com@localhost>]

It might be better, if this is just for pkgsrc, to call the definition
PKGSRC_USE_SSP.

Regards,
Alistair

On 22 July 2015 at 15:15, Pierre Pronchery <khorben%defora.org@localhost> wrote:
>                         So,
>
> On 07/18/15 18:38, Pierre Pronchery wrote:
>> while looking for ways to provide binary packages for EdgeBSD users in
>> line with the current state of the art, I found that there are some
>> low-hanging fruits up for grabs:
>> http://git.edgebsd.org/gitweb/?p=edgebsd-pkgsrc.git;a=commitdiff;h=705b8
>> 40d59ecd6834320c15d12ecdf38e133c0d7
>>
>> 1. Building with stack smashing protection: (SSP)
>> [...]
>> Let me know if any of those look good enough for NetBSD's base system,
>> or if they can already be discussed there as well.
>
> Now that we agree to disagree, I have prepared this part for
> integration. Please review and let me know if I can push it in pkgsrc.
> It adds support for SSP, when enabled in mk.conf(5) with USE_SSP=yes. It
> is otherwise disabled by default.
>
> It can also be found there:
> http://git.edgebsd.org/gitweb/?p=edgebsd-pkgsrc.git;a=commitdiff;h=aca6ef1c664499f98aa3df018a03f30ff728aea6
>
> I will maintain it on this branch:
> http://git.edgebsd.org/gitweb/?p=edgebsd-pkgsrc.git;a=shortlog;h=refs/heads/integration/ssp
>
> Cheers,
> --
> khorben