aboutsummaryrefslogtreecommitdiffstats
path: root/rescue/librescue/Makefile
diff options
context:
space:
mode:
authorRuslan Ermilov <ru@FreeBSD.org>2008-06-25 21:33:28 +0000
committerRuslan Ermilov <ru@FreeBSD.org>2008-06-25 21:33:28 +0000
commit042df2e2dadea9f43b62b79ed97534c0eecf1dad (patch)
tree3821989620f33150162837ccfad067791bb346ca /rescue/librescue/Makefile
parent0d9e99b6ca4f54bf4f902715e8870d9ff19a8afa (diff)
downloadsrc-042df2e2dadea9f43b62b79ed97534c0eecf1dad.tar.gz
src-042df2e2dadea9f43b62b79ed97534c0eecf1dad.zip
Enable GCC stack protection (aka Propolice) for userland:
- It is opt-out for now so as to give it maximum testing, but it may be turned opt-in for stable branches depending on the consensus. You can turn it off with WITHOUT_SSP. - WITHOUT_SSP was previously used to disable the build of GNU libssp. It is harmless to steal the knob as SSP symbols have been provided by libc for a long time, GNU libssp should not have been much used. - SSP is disabled in a few corners such as system bootstrap programs (sys/boot), process bootstrap code (rtld, csu) and SSP symbols themselves. - It should be safe to use -fstack-protector-all to build world, however libc will be automatically downgraded to -fstack-protector because it breaks rtld otherwise. - This option is unavailable on ia64. Enable GCC stack protection (aka Propolice) for kernel: - It is opt-out for now so as to give it maximum testing. - Do not compile your kernel with -fstack-protector-all, it won't work. Submitted by: Jeremie Le Hen <jeremie@le-hen.org>
Notes
Notes: svn path=/head/; revision=180012
Diffstat (limited to 'rescue/librescue/Makefile')
-rw-r--r--rescue/librescue/Makefile2
1 files changed, 2 insertions, 0 deletions
diff --git a/rescue/librescue/Makefile b/rescue/librescue/Makefile
index 03ffec57139f..9fd3c8f4d0c9 100644
--- a/rescue/librescue/Makefile
+++ b/rescue/librescue/Makefile
@@ -2,6 +2,8 @@
# $FreeBSD$
#
+WITHOUT_SSP=
+
.include <bsd.own.mk>
# Certain library entries have hard-coded references to