Re: [gentoo-hardened] How to compile with hardened toolchain?

[Jan Klod]

On Monday 24 November 2008 21:53:37 atoth@××××××××××.hu wrote:
> Dear Jan,
>
> I've run through what I'd wrote and I have a feeling, that it can be
> misleading.
> So here is an actual example output of the command "gcc-config -l":
> "
> hostname ~ # gcc-config -l
>  [1] i686-pc-linux-gnu-4.2.4 *
>  [2] i686-pc-linux-gnu-4.2.4-nofortify
>  [3] i686-pc-linux-gnu-4.2.4-nopie
>  [4] i686-pc-linux-gnu-4.2.4-nossp_all
>  [5] i686-pc-linux-gnu-4.2.4-strict
>  [6] i686-pc-linux-gnu-4.2.4-vanilla
> "
> Here you can see, that the same version of gcc has several profiles. The
> one without any additional tag is the default hardened profile. Compiles
> hardened executables by default. The vanilla profile is intended to
> implement the original non-hardened behavior.
> I'm running the experimental hardened toolchain, which is the reason I
> have entries 2, 4 and 5. If you are not using the experimental hardened
> toolchain you should probably have to have 3.4.6, -nopie, -nossp and
> -vanilla. If you have gcc-4+ and you are not using the experimental
> hardened toolchain you are probably missing hardened toolchain features
> (some developers tend to neglect and/or treat useless - I don't understand
> why).
>
> Regards,
> Dw.

You are helpful this evening :)
Well, I am reading about various things *hardened.

Regards