1 |
lördag 24 oktober 2009 14.57.30 skrev Kakou: |
2 |
> Le 24 oct. 2009 à 14:50, Ed W a écrit : |
3 |
> > Kakou wrote: |
4 |
> >> Hello all, |
5 |
> >> |
6 |
> >> I have updated my gcc 3.4 profile (with SELinux) to gcc 4.3 profile |
7 |
> >> (with a modified profile to support SELinux v2 policy). |
8 |
> >> After recompiling gcc+glibc, I obtain this : |
9 |
> >> |
10 |
> >> gcc-config -l |
11 |
> >> |
12 |
> >> [1] i686-pc-linux-gnu-4.3.4 * |
13 |
> >> [2] i686-pc-linux-gnu-4.3.4-hardenednopie |
14 |
> >> [3] i686-pc-linux-gnu-4.3.4-vanilla |
15 |
> >> |
16 |
> >> [2] does not support support pie and I don't have a -hardened config. |
17 |
> >> So my question is : "[1] is the gcc hardened profile ?" |
18 |
> >> (when I test with paxtest, all is randomized) |
19 |
> > |
20 |
> > Yes - actually I think it was the same on the gcc-3.4 profile also - |
21 |
> > the hardened profile was just the short named option and the other |
22 |
> > options are the ones which gradually work towards the "vanilla" |
23 |
> > specs by disabling certain hardening features |
24 |
> |
25 |
> Ok I was confused with the howto |
26 |
> (http://www.gentoo.org/proj/en/hardened/toolchain-upgrade-guide.xml ) : |
27 |
> |
28 |
> Code Listing 2.5: Select hardened gcc |
29 |
> |
30 |
> gcc-config -l |
31 |
> gcc-config <new gcc>-hardened |
32 |
> source /etc/profile |
33 |
> ----- |
34 |
> |
35 |
> Now I try to use the gcc 4.4 version on the git hardened-development |
36 |
> and I have 2 questions : |
37 |
> - espf is included in this version but not in gcc 4.3 version that are |
38 |
> present in the portage tree ? |
39 |
> - espf is like ssp protection ? |
40 |
> |
41 |
> > Good luck |
42 |
> > |
43 |
> > Ed W |
44 |
> |
45 |
1. The espf is new version of the pie patchset that is in the tree |
46 |
for it do more then only add Position independent executable (PIE) to GCC. |
47 |
2. espf stand for Enable Stack smashing protection, Position independent |
48 |
executable and Fortify_sources. |
49 |
Hope this help you. |
50 |
|
51 |
Hardened-dev overlay |
52 |
Magnus Granberg (Zorry) |