tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: CFLAGS='-fstack-protector -D_FORTIFY_SOURCE=2'



On Wed, Jan 21, 2009 at 05:32:33PM -0500, Ed Ravin wrote:
>
> At the advice of one of the denizens of this list, I've started
> doing all my local builds with -fstack-protector (Stackguard)
> and -D_FORTIFY_SOURCE=2 (runtime bounds checking).
> 
> Are there any plans to use these flags in the default builds of
> NetBSD or in pkgsrc?

Much of NetBSD is already built that way (you can build all of it that
way by setting USE_FORT and USE_SSP and running a build).  I don't know
about pkgsrc.

-- 
Thor Lancelot Simon                                        
tls%rek.tjls.com@localhost
    "Even experienced UNIX users occasionally enter rm *.* at the UNIX
     prompt only to realize too late that they have removed the wrong
     segment of the directory structure." - Microsoft WSS whitepaper


Home | Main Index | Thread Index | Old Index