1 |
2009/6/25 Marcel Meyer <meyerm@××××××.de>: |
2 |
> Hi, |
3 |
> |
4 |
> Am Donnerstag, 25. Juni 2009 schrieb Marcel Kummerow: |
5 |
>> 2009/6/25 Ed W <lists@××××××××××.com> |
6 |
>> |
7 |
>> > [..] hardened GCC4 |
8 |
>> > |
9 |
>> > Anyone able to provide such a summary please? |
10 |
>> |
11 |
>> http://forums.gentoo.org/viewtopic-t-705939.html |
12 |
> |
13 |
> what happens in the future when this overlay will no longer be provided? |
14 |
|
15 |
If you're just looking for PIE support, you don't need any overlays. |
16 |
Just unmask gcc-4.3.3-r2: |
17 |
|
18 |
echo "=sys-devel/gcc-4.3.3-r2" >> /etc/portage/package.keywords |
19 |
|
20 |
Upon installing/upgrading the ebuild in question, you'll find that a |
21 |
set of hardened specs are provided: |
22 |
|
23 |
[1] x86_64-pc-linux-gnu-4.3.3 * |
24 |
[2] x86_64-pc-linux-gnu-4.3.3-hardenednopie |
25 |
[3] x86_64-pc-linux-gnu-4.3.3-vanilla |
26 |
|
27 |
If you're installing a system from scratch then, in my opinion, it is |
28 |
a lot easier to rebuild a system seeded with a recent (vanilla) |
29 |
autobuild stage than it is to use the hardened stages (which are still |
30 |
based on gcc-3.4.6-r2 and usually stale in other respects). |
31 |
|
32 |
Cheers, |
33 |
|
34 |
--Kerin |