[fbsd] Integrating ProPolice/SSP into FreeBSD

[Chris]

Garance A Drosihn wrote:
> At 2:31 AM +0300 6/10/06, Giorgos Keramidas wrote:
>> On 2006-06-09 16:40, Chris <rip at overflow.no> wrote:
>>
>>  > I'm using it successfuly with the stackp-gap and the random
>>  > mmap on 6.1-RELEASE. No problems at all really :) Except
>>  > that I want a nob for gcc to use the protection by default.
>>  > We discussed this in another email.
>>
>> You can always use `/etc/make.conf' to set it globally, right?
>
For the system itself, yes, but as the below text also says: not for
customs built programs.
> Not quite globally.  That will only set it for programs
> whose makefiles .include /usr/share/mk/sys.mk .  That's
> all of buildworld, but it wouldn't include programs that
> people are building on their own.
>

Exactly :) This is however the default on the 4.x and 5.x patches as
opposed to the 6.x and 7.x which has slight modified behaviour.
I think Jeremie did this to make it as little intrusive as possible,
which was a good thought, although I would like the option to make it
very intrusive :)

-Chris