Re: [gentoo-dev] Stack smash protected daemons

[Ciaran McCreesh]

On Wed, 22 Sep 2004 11:54:55 -0400 John Richard Moser
<nigelenki@×××××××.net> wrote:
| I believe it would be a good idea to have such a FEATURES or USE flag
| on by default in all profiles where SSP is supported.  In this manner,
| the major targets of security attacks would automatically be
| protected; while still allowing the user to disable the protection if
| the user desires.  Users wanting more protection can simply add
| -fstack-protector to CFLAGS, or use Hardened Gentoo.

Personally, I don't see the point in an ugly hack which occasionally
sort of protects you from badly written code... The option's there for
anyone who really wants it, but we tend more towards a "turn most things
off unless the user asks for them" approach, hence the relatively low
number of things turned on in the default USE settings.

| Any comments?  Would this be more suitable as a USE or a FEATURES
| setting?

FEATURES, not USE.

-- 
Ciaran McCreesh : Gentoo Developer (Sparc, MIPS, Vim, Fluxbox)
Mail            : ciaranm at gentoo.org
Web             : http://dev.gentoo.org/~ciaranm