Re: [gentoo-hardened] purpose of guard.c (ssp_guard.o)

[Alexander Gabert]

hi,

this object has been introduced due to the fact that gcc sometimes did
not emit proper guard symbols into a binary and a library needed it
however.
so we put that in, but it opened more problems than it solved because
now there are too many guards around.

currently this object is going to be integrated in glibc and gcc a bit
different, i will introduce it this weekend i hope.

for now, you can disable hcc when compiling a kernel and/or take out the
ssp_guard.o of the specs file.

bye,

Alex

On Thu, 2003-10-30 at 21:12, Peter S. Mazinger wrote:
> Hello!
>
> What is the purpose, use of the file(s)? I do not have a gentoo
> installation, but I am considering using it on my platform (uClibc). I
> know it is regarding to propolice, but when are they used. I have checked
> the scripts from hardened-gcc-2.4.4, and it looks like you use them only
> for static binaries. Is this right? Is it needed, if all the builds are
> done with -fstack-protector(-all) set?
>
> The patch (2.4.20-xxx, guard, smash) for the kernel produces warnings,
> regarding guard from lib/propolice.c, when the kernel is
> built. I haven't activated HAVE_PROPOLICE yet. Is this
> normal?
>
> Peter


--
gentoo-hardened@g.o mailing list