Gentoo Archives: gentoo-hardened

From: Ned Ludd <solar@g.o>
To: Lance Albertson <ramereth@g.o>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Hardened (PIE/SSP) 2004.2 Beta - Get it while its hot!
Date: Wed, 09 Jun 2004 04:43:22
Message-Id: 1086756099.9101.1489.camel@simple
In Reply to: Re: [gentoo-hardened] Hardened (PIE/SSP) 2004.2 Beta - Get it while its hot! by Lance Albertson
1 On Wed, 2004-06-09 at 00:33, Lance Albertson wrote:
2 > On Tue, 2004-06-08 at 22:51, Brandon Hale wrote:
3 >
4 > > DO NOT add -fstack-protector, -fPIC, etc to CFLAGS. These are provided
5 > > by the gcc specfiles. DO NOT add USE=nptl or use 2.6 headers. Otherwise,
6 > > go freakin nuts and test the hell out of these things.
7 >
8
9
10 > Also, DO NOT use LDFLAGS="-pie" as it should be included too (correct me
11 > if I'm wrong on this tho).
12
13
14 Your absolutely correct.
15
16 CFLAGS/LDFLAGS appear as if they were a normal *insecure* gentoo-x86
17 install.
18
19 --
20 Ned Ludd <solar@g.o>
21 Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer

Attachments

File name MIME type
signature.asc application/pgp-signature