Re: HEADS-UP: Stack Smash Protection enabled by default for amd64 and i386

[Steven Bellovin <smb%cs.columbia.edu@localhost>]

On Nov 11, 2009, at 1:53 PM, Matthias Scheler wrote:

> On Wed, Nov 11, 2009 at 07:27:22PM +0100, Tobias Nygren wrote:
>>> BTW: this change does *not* require you to recompile your packages
>>>     or any other binaries. They will continue to work but have
>>>     only limitted stack smash protection.
>> 
>> Is there any benefit to recompiling packages?
> 
> I don't think so.

Is there any way to make this the default when compiling packages?  If so, 
there's a big advantage to recompiling them all -- and to making sure it's set 
when doing bulk builds.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb