Re: [gentoo-dev] Re: News item for hardened profile about gcc.

[Magnus Granberg]

On Sunday 24 October 2010 10.04.34 Kfir Lavi wrote:
> On Sun, Oct 24, 2010 at 3:34 AM, Duncan <1i5t5.duncan@×××.net> wrote:
> > Magnus Granberg posted on Sun, 24 Oct 2010 03:01:40 +0200 as excerpted:
> > > Display-If-Install: <sys-devel/gcc-4.4
> >
> > Typo:
> >
> > Display-If-Installed:
> >                  ^^
> >
> > Meanwhile, the title reflects hardened profiles, but the updated
> > conditions aren't viewed only on hardened.  The no-support-for-<gcc-4
> > policy would seem reasonable for most profiles (don't know about the
> > exotic archs).  Either the title should be updated to reflect that it
> > applies in general (not just on hardened), or the condition to display
> > only on hardened should be maintained.  Either way, making it clearer in
> > the body as well would be wise, so people seeing it only on hardened (if
> > it applies only to them, for example) will have less chance of missing
> > that, if they have regular installs as well.
> >
> > But I don't remember whether multiple conditions are ANDed or ORed; they
> > should be ANDed here, if it's to apply to ONLY hardened with <gcc-4.4
> > installed.
> >
> > --
> > Duncan - List replies preferred.   No HTML msgs.
> > "Every nonfree program has a lord, a master --
> > and if you use the program, he is your master."  Richard Stallman
>
> Hi all,
> After reading this post I went to wikipedia to read about  the SSP.
> http://en.wikipedia.org/wiki/Buffer_overflow_protection
> At the paragraph "GCC Stack-Smashing Protector (ProPolice)", its written"
>
> "It was implemented as a patch to GCC 3.x; a less intrusive
> reimplementation is included in the GCC 4.1 release. Currently, SSP is
> standard in OpenBSD, FreeBSD (since 8.0), Ubuntu (since 8.04 LTS[3]),
> and DragonFly BSD. It is also available in NetBSD (enabled by default
> on x86), Debian and Gentoo, disabled by default."
>
> Now this should be changed, if the SSP flag is becoming default.
>
> Regards,
> Kfir
Updated the news item.
Thanks for the notes Duncan.
@Kfir  It is only the hardened gcc that have the SSP enable as default.
We can add that Gentoo (Hardened) have it enable.

/Magnus
/Magnus