Re: [gentoo-hardened] Hardened meeting summary 2010-05-16

[Magnus Granberg]

måndag 17 maj 2010 10.34.05 skrev  Javier Juan Martínez Cabezón:
> I get realized of this question at the bad way, after seeing that the
> binaries didn't have the canary inside. After that I compiled the system
> with ssp in the unclean way, -fstack-protector-all in CFLAGS and CXXFLAGS
>  in make.conf with the exception of glibc that works only with
> -fstack-protector. If someone need ssp with this versions it could be the
> way to have it working until it gets solved.
>
> ¿Do you recommend this "workaround" until solution?
>
I do not recommend it but it is up to you.
For some packages may brake like glibc do.

Hardened at gentoo.org
Magnus Granberg (zorry)