Gentoo Archives: gentoo-hardened

From: Kerin Millar <kerframil@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] GCC4 (again...)
Date: Thu, 25 Jun 2009 13:39:45
Message-Id: 279fbba40906250639g528656e7yc86bcae0ae9f501@mail.gmail.com
In Reply to: Re: [gentoo-hardened] GCC4 (again...) by Marcel Meyer
1 2009/6/25 Marcel Meyer <meyerm@××××××.de>:
2 > Hi,
3 >
4 > Am Donnerstag, 25. Juni 2009 schrieb Marcel Kummerow:
5 >> 2009/6/25 Ed W <lists@××××××××××.com>
6 >>
7 >> > [..] hardened GCC4
8 >> >
9 >> > Anyone able to provide such a summary please?
10 >>
11 >> http://forums.gentoo.org/viewtopic-t-705939.html
12 >
13 > what happens in the future when this overlay will no longer be provided?
14
15 If you're just looking for PIE support, you don't need any overlays.
16 Just unmask gcc-4.3.3-r2:
17
18 echo "=sys-devel/gcc-4.3.3-r2" >> /etc/portage/package.keywords
19
20 Upon installing/upgrading the ebuild in question, you'll find that a
21 set of hardened specs are provided:
22
23 [1] x86_64-pc-linux-gnu-4.3.3 *
24 [2] x86_64-pc-linux-gnu-4.3.3-hardenednopie
25 [3] x86_64-pc-linux-gnu-4.3.3-vanilla
26
27 If you're installing a system from scratch then, in my opinion, it is
28 a lot easier to rebuild a system seeded with a recent (vanilla)
29 autobuild stage than it is to use the hardened stages (which are still
30 based on gcc-3.4.6-r2 and usually stale in other respects).
31
32 Cheers,
33
34 --Kerin