fstack protector

[Kris Kennaway]

On Fri, Apr 11, 2003 at 11:58:02AM -0500, Mike Silbersack wrote:

> One possible solution would be to have a gcc-ssp port which would build a
> SSP version of the base system's compiler, and call it gcc-ssp or
> something.  Then we could make certain ports depend on using it, perhaps.

That's the best solution for FreeBSD.  You'd just set CC and CFLAGS if
you want to build with it, as usual.  Be aware that some ports will
not run when built with -fstack-protector, last time I checked
(XFree86 is one).

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20030412/9f2c33e3/attachment.bin