[gentoo-hardened] Re: Hardened meeting summary 2010-05-16

[Peter Hjalmarsson]

mån 2010-05-17 klockan 21:28 +0100 skrev Ed W:
> Can anyone comment if this is the case or I'm worrying over nothing?
>
> Ta
>
> Ed W
>

I would say you're worrying too much.

The important part in the toolchain equation is really PIE (and of
course -z,now, relro and those other stuff people forgets about) to give
you ASLR, and it is there in hardened gcc-4.3 in tree. SSP is also there
to some extent because it is implemented in FORTIFY_SOURCE which is
enabled in all of gentoo by default.
So I would say that the extra part SSP from GCC is nice but not
necessary.

Regards
Peter