[gentoo-hardened] ProPolice and building mit-krb5

[Laurence Jupp]

Hello,
	I don't know if this is the right place to ask about this, it seems
to be rather quiet here and so it's difficult to tell.

	After having a peep at the propolice part of the hardened gentoo
website, I thought I'd have a play with it. I recompiled my system with
stack-smashing protection and mostly it seemed to build fine. The only
problem I encounterd was with mit-krb5. With the 1.2.7 release I get
this:

make[3]: Entering directory
`/var/tmp/portage/mit-krb5-1.2.7/work/krb5-1.2.7/src/lib/rpc/unit-test'

.
.
.

gcc -L../../../lib -Wl,-rpath -Wl,/usr/lib -o client client.o
rpc_test_clnt.o \
        -lgssrpc -ldyn -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.2.3/../../../../i686-pc-linux-gnu/bin/ld:
client: hidden symbol `__stack_smash_handler' in
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.2.3/libgcc.a(_stack_smash_handler.oS)
is referenced by DSO

I get something similar in 1.2.8 and unfortunately when I tried to
download 1.3_alpha1, I just got file not found errors. Have I done
something silly? This isn't affecting my system in the slightest as
kerberos is only on there for me to play with and I don't run the kdc
or admin servers, so I'm only really reporting this incase anyone
else is interested.

-- 
Laurence



--
gentoo-hardened@g.o mailing list