Gentoo Archives: gentoo-hardened

From: Kakou <kakou@×××××.org>
To: gentoo-hardened@l.g.o
Cc: Kakou <kakou@×××××.org>
Subject: Re: [gentoo-hardened] NOTICE: GCC 4.3.4 going stable on Hardened
Date: Sat, 24 Oct 2009 11:03:05
Message-Id: 62EA96AA-E60B-409D-A9F2-9E6636915792@kakou.org
In Reply to: [gentoo-hardened] NOTICE: GCC 4.3.4 going stable on Hardened by Gordon Malm
1 Hello all,
2
3 I have updated my gcc 3.4 profile (with SELinux) to gcc 4.3 profile
4 (with a modified profile to support SELinux v2 policy).
5 After recompiling gcc+glibc, I obtain this :
6
7 gcc-config -l
8
9 [1] i686-pc-linux-gnu-4.3.4 *
10 [2] i686-pc-linux-gnu-4.3.4-hardenednopie
11 [3] i686-pc-linux-gnu-4.3.4-vanilla
12
13 [2] does not support support pie and I don't have a -hardened config.
14 So my question is : "[1] is the gcc hardened profile ?"
15 (when I test with paxtest, all is randomized)
16
17 Thanks,
18
19 Kakou
20
21 Le 14 oct. 2009 à 01:02, Gordon Malm a écrit :
22
23 > Hello Hardened users, this is just a quick heads up. GCC 4.3.4 will
24 > be going
25 > stable on hardened profiles shortly. Unlike Hardened GCC 3.4.6,
26 > this version
27 > lacks default SSP building. However, FORTIFY_SOURCE=2
28 > and -fno-strict-overflow are now enabled by default. Other Hardened
29 > compiler
30 > features (ex. default relro, bind now & pic/pie building) remain
31 > enabled - no
32 > change from 3.4.6.
33 >
34 > It is regretable this must be done before GCC4 is SSP-by-default
35 > enabled.
36 > However, more and more packages require the newer GCC. The stable
37 > GCC on
38 > Hardened has been GCC 3.4.6 for a long time, but this has become an
39 > untenable
40 > situation. GCC4 SSP-by-default works and will be added in a later
41 > revision -
42 > some GCC4+SSP bugs in grub and glibc also remain to be fixed.
43 >
44 > Please follow '2. General Upgrade Instructions' in the 'Gentoo GCC
45 > Upgrade
46 > Guide' [1] when upgrading from GCC 3.4.x to GCC 4.3.x. The upgrade
47 > should be
48 > relatively smooth, but if you run into upgrade troubles seek help
49 > via this
50 > mailing list, bugs.gentoo.org, or irc.freenode.net, #gentoo-hardened.
51 >
52 > [1] http://www.gentoo.org/doc/en/gcc-upgrading.xml
53 >
54 > Sincerely,
55 > Gordon Malm (gengor)
56 >

Replies

Subject Author
Re: [gentoo-hardened] NOTICE: GCC 4.3.4 going stable on Hardened Ed W <lists@××××××××××.com>