Re: Updated patch for pkgsrc hardening

[Pierre Pronchery <khorben%defora.org@localhost>]

			Hi all,

On 03/01/16 08:55, Thomas Klausner wrote:
> On Mon, Feb 29, 2016 at 09:23:25PM -0500, Greg Troxel wrote:
>> I am curious what kind of testing this has received.  Have you done bulk
>> builds with this?  On which platforms?  Have the programs had their
>> tests run ('make test'), and are there regressions?
> 
> My NetBSD-amd64/7.99.26 desktop system and ~2200 packages bulk build
> have SSP and FORT turned on. I had to fix a couple of packages to
> build, but now I see no difference to before had these turned on.

Same here on NetBSD 7 (amd64) and ~1000 packages in daily use. I pushed
some fixes for SSP and PIE in pkgsrc already.

> Well, one difference:
> 
> at-spi-bus-launcher - - - buffer overflow detected; terminated
> 
> So it seems to be working.

I also observed this, but haven't investigated it yet.

Cheers,
-- 
khorben