[fbsd] Integrating ProPolice/SSP into FreeBSD

[M. Warner Losh]

In message: <448A12BB.3040401 at overflow.no>
            Chris <rip at overflow.no> writes:
: Garance A Drosihn wrote:
: > At 2:31 AM +0300 6/10/06, Giorgos Keramidas wrote:
: >> On 2006-06-09 16:40, Chris <rip at overflow.no> wrote:
: >>
: >>  > I'm using it successfuly with the stackp-gap and the random
: >>  > mmap on 6.1-RELEASE. No problems at all really :) Except
: >>  > that I want a nob for gcc to use the protection by default.
: >>  > We discussed this in another email.
: >>
: >> You can always use `/etc/make.conf' to set it globally, right?
: >
: For the system itself, yes, but as the below text also says: not for
: customs built programs.
: > Not quite globally.  That will only set it for programs
: > whose makefiles .include /usr/share/mk/sys.mk .  That's
: > all of buildworld, but it wouldn't include programs that
: > people are building on their own.
: >
: 
: Exactly :) This is however the default on the 4.x and 5.x patches as
: opposed to the 6.x and 7.x which has slight modified behaviour.
: I think Jeremie did this to make it as little intrusive as possible,
: which was a good thought, although I would like the option to make it
: very intrusive :)

-current includes /usr/share/mk/sys.mk, which brings in
/etc/make.conf.  The src.conf is only used for buildworld, and only in
-current.  This has been the behavior back to sometime in the 2.x
timeframe...  All the WITH/WITHOUT stuff hasn't been MFC'd.

Warner