| 1 |
On Tue, Sep 23, 2014 at 5:49 AM, Walter Dnes <waltdnes@××××××××.org> wrote: |
| 2 |
> I did an emerge update just now, and figured it was time to jump to |
| 3 |
> the latest stable kernel (3.14.16). I ran "make oldconfig". Amongst |
| 4 |
> the new features, I selected "stack-protector-strong". When trying to |
| 5 |
> build the new kernel, I got... |
| 6 |
> |
| 7 |
> scripts/kconfig/conf --silentoldconfig Kconfig |
| 8 |
> Makefile:615: Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not supported by compiler |
| 9 |
> SYSHDR arch/x86/syscalls/../include/generated/uapi/asm/unistd_32.h |
| 10 |
> SYSHDR arch/x86/syscalls/../include/generated/uapi/asm/unistd_64.h |
| 11 |
> SYSHDR arch/x86/syscalls/../include/generated/uapi/asm/unistd_x32.h |
| 12 |
> SYSTBL arch/x86/syscalls/../include/generated/asm/syscalls_32.h |
| 13 |
> HOSTCC arch/x86/tools/relocs_32.o |
| 14 |
> HOSTCC arch/x86/tools/relocs_64.o |
| 15 |
> HOSTCC arch/x86/tools/relocs_common.o |
| 16 |
> HOSTLD arch/x86/tools/relocs |
| 17 |
> CHK include/config/kernel.release |
| 18 |
> UPD include/config/kernel.release |
| 19 |
> WRAP arch/x86/include/generated/asm/clkdev.h |
| 20 |
> CHK include/generated/uapi/linux/version.h |
| 21 |
> UPD include/generated/uapi/linux/version.h |
| 22 |
> CHK include/generated/utsrelease.h |
| 23 |
> UPD include/generated/utsrelease.h |
| 24 |
> CC kernel/bounds.s |
| 25 |
> gcc: error: unrecognized command line option '-fstack-protector-strong' |
| 26 |
> make[1]: *** [kernel/bounds.s] Error 1 |
| 27 |
> make: *** [prepare0] Error 2 |
| 28 |
> |
| 29 |
> I switched stack-protector to "regular", and it built OK. I rebooted |
| 30 |
> into it, and it works OK. |
| 31 |
> |
| 32 |
> My gcc version data... |
| 33 |
> |
| 34 |
> [d531][root][/usr/src/linux] gcc --version |
| 35 |
> gcc (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) 4.7.3 |
| 36 |
> Copyright (C) 2012 Free Software Foundation, Inc. |
| 37 |
> This is free software; see the source for copying conditions. There is NO |
| 38 |
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
| 39 |
> |
| 40 |
> My install is 32-bit |
| 41 |
> |
| 42 |
> [d531][waltdnes][~] uname -a |
| 43 |
> Linux d531 3.14.16-gentoo #1 SMP Mon Sep 22 20:43:33 EDT 2014 i686 Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz GenuineIntel GNU/Linux |
| 44 |
> |
| 45 |
> -- |
| 46 |
> Walter Dnes <waltdnes@××××××××.org> |
| 47 |
> I don't run "desktop environments"; I run useful applications |
| 48 |
> |
| 49 |
|
| 50 |
Looks like support for '-fstack-protector-strong' was implemented in |
| 51 |
more recent versions of gcc. The the URL below for details: |
| 52 |
|
| 53 |
https://securityblog.redhat.com/tag/stack-protector/ |
Archives