Gentoo Archives: gentoo-hardened

From: "Peter S. Mazinger" <ps.m@×××.net>
To: Ned Ludd <solar@g.o>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] hardened experience in grsecurity forum
Date: Sun, 26 Sep 2004 12:51:50
Message-Id: Pine.LNX.4.44.0409261446190.16386-100000@lnx.bridge.intra
In Reply to: Re: [gentoo-hardened] hardened experience in grsecurity forum by Ned Ludd
1 On Sun, 26 Sep 2004, Ned Ludd wrote:
2
3 > On Sun, 2004-09-26 at 06:56, Peter S. Mazinger wrote:
4 > > Hello!
5 > >
6 > > On the 24. NeoMike answered to the thread
7 > > -is only grsecurity enough, or -fstack-protector
8 >
9 > Where is the reference thread? which list?
10
11 www.grsecurity.net in Forum (as I said in subject)
12
13 > >
14 > > We could use those results too. I am really interested about the
15 > > experience w/ SSP and -O -O2 -O3 -O4+.
16 > > He says the best for hardened is -Os, the other optimizations "kill" SSP.
17 >
18 > Without knowing the the thread in question it's hard to make a guess as
19 > to what he ment. But using the gcc optimization flag -O3 has been known
20 > to be problematic with stack-smashing protector (SSP) in some
21 > situations. This optimization flag is not encouraged by the hardened
22 > team.
23 >
24 > However on June 23 Etoh made a change to ssp which may of made the
25 > optimizer when using -O3 not eliminate the protection instruments so
26 > things may have changed.
27 >
28 > >
29 > > What do you think of this?
30 > >
31 > > Peter
32 >
33
34 --
35 Peter S. Mazinger <ps dot m at gmx dot net> ID: 0xA5F059F2
36 Key fingerprint = 92A4 31E1 56BC 3D5A 2D08 BB6E C389 975E A5F0 59F2
37
38
39 ____________________________________________________________________
40 Miert fizetsz az internetert? Korlatlan, ingyenes internet hozzaferes a FreeStarttol.
41 Probald ki most! http://www.freestart.hu
42
43 --
44 gentoo-hardened@g.o mailing list