Gentoo Archives: gentoo-hardened

From: Alex Xu <alex_y_xu@×××××.ca>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Disabling SSP for one package
Date: Tue, 17 Dec 2013 13:57:39
Message-Id: 52B05849.5050808@yahoo.ca
In Reply to: [gentoo-hardened] Disabling SSP for one package by Michael Orlitzky
1 On 17/12/13 08:44 AM, Michael Orlitzky wrote:
2 > I'm hitting a nasty bug with SSP/PHP:
3 >
4 > https://bugs.gentoo.org/show_bug.cgi?id=491100
5 >
6 > Recompiling PHP with hardenednossp fixes the problem, but on this one
7 > server we're recompiling PHP a lot (as we figure out which extensions
8 > are needed to migrate a bunch of classic ASP sites).
9 >
10 > Supposing I'm very forgetful, what's the best way to prevent myself from
11 > rebuilding PHP with SSP? Copy the ebuild to an overlay and locally mask
12 > newer versions?
13 >
14
15 Can't you do CFLAGS=-fno-stack-protector in p.env?

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Disabling SSP for one package Michael Orlitzky <mjo@g.o>