1 |
On 15-05-2008 22:46:13 +1000, Matt Michalowski wrote: |
2 |
> This is what I get with openssh-5.0_p1-r1 on amd64-linux: |
3 |
> x86_64-pc-linux-gnu-gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o |
4 |
> sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ |
5 |
> -fstack-protector -lssh -lopenbsd-compat -L/opt/hwbp/usr/lib64 -lssl |
6 |
> -lcrypto -ldl -lutil -lz -lnsl -lcrypt -lresolv -lresolv |
7 |
> ssh.o: In function `env_permitted': |
8 |
> ssh.c:(.text+0x220): undefined reference to `__stack_chk_fail' |
9 |
[snip] |
10 |
> The problem is that the openssh configure checks that the compiler supports |
11 |
> -fstack-protector which succeeds: |
12 |
> configure:5418: checking if x86_64-pc-linux-gnu-gcc supports |
13 |
> -fstack-protector |
14 |
[snip] |
15 |
> Yet the toolchain.eclass has configured gcc with --disable-libssp, so I |
16 |
> don't have libssp. A couple of solutions I can think of but haven't tried: |
17 |
> - configure openssh with --without-stackprotect |
18 |
> - get toolchain.eclass to --enable-libssp and ensure SSP works |
19 |
> |
20 |
> So in my opinion, best left masked for now. |
21 |
|
22 |
Thanks for the in depth explanation. I'd not be surprised if Solaris |
23 |
actually has the same problem. |
24 |
|
25 |
I've no idea of it in the main tree, but since it doesn't even compile |
26 |
on Linux, I'd say, keep it masked. |
27 |
|
28 |
If Interix needs it, and has it compiling all the way, Markus use |
29 |
package.unmask in the interix profile. |
30 |
|
31 |
|
32 |
-- |
33 |
Fabian Groffen |
34 |
Gentoo on a different level |
35 |
-- |
36 |
gentoo-alt@l.g.o mailing list |