Gentoo Archives: gentoo-hardened

From:	"Tóth Attila" <atoth@××××××××××.hu>
To:	gentoo-hardened@l.g.o
Subject:	Re: [gentoo-hardened] gcc compiler flags - some room for more hardening?
Date:	Fri, 19 Jan 2018 19:32:45
Message-Id:	`8e5f616acaf014e618e2bc2c793af1b3.squirrel@atoth.sote.hu`
In Reply to:	Re: [gentoo-hardened] gcc compiler flags - some room for more hardening? by Magnus Granberg

1	2018.Január 18.(Cs) 02:20 időpontban Magnus Granberg ezt írta:
2	> onsdag 17 januari 2018 kl. 13:27:25 CET skrev Tóth Attila:
3	>> I've just came accross a Fedora 28 memo about hardening their flags:
4	>> https://fedoraproject.org/wiki/Changes/HardeningFlags28
5	>> 1. -fstack-clash-protection
6	>> 2. -fcf-protection=full
7	>> 3. -mcet
8	>>
9	> Most of the options is for Gcc 8 or newer.
10	> Still waiting what get add for the Spectre stuff.
11
12	Some of these will probably require hardware support I don't have - ibt,
13	shstk, cet. However it's still interesting.
14	Let the community know if we can help with anything.
15
16	Thanks: Dw.
17	--
18	dr Tóth Attila, Radiológus, 06-20-825-8057
19	Attila Toth MD, Radiologist, +36-20-825-8057