* [gentoo-commits] gentoo commit in xml/htdocs/proj/en/hardened: etdyn.xml
@ 2011-05-04 21:45 Francisco Blas Izquierdo Riera (klondike)
0 siblings, 0 replies; only message in thread
From: Francisco Blas Izquierdo Riera (klondike) @ 2011-05-04 21:45 UTC (permalink / raw
To: gentoo-commits
klondike 11/05/04 21:45:00
Modified: etdyn.xml
Log:
Solving QA issues
Revision Changes Path
1.4 xml/htdocs/proj/en/hardened/etdyn.xml
file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/proj/en/hardened/etdyn.xml?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/proj/en/hardened/etdyn.xml?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/proj/en/hardened/etdyn.xml?r1=1.3&r2=1.4
Index: etdyn.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/hardened/etdyn.xml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- etdyn.xml 31 Dec 2003 04:59:03 -0000 1.3
+++ etdyn.xml 4 May 2011 21:44:59 -0000 1.4
@@ -1,7 +1,7 @@
<?xml version='1.0' encoding="utf-8"?>
<!DOCTYPE guide SYSTEM "/dtd/guide.dtd">
<guide link="/proj/en/hardened/etdyn.xml">
-
+<title>ETDYN guide</title>
<author title="Author">
<mail link="pageexec@freemail.hu">The PaX Team</mail>
</author>
@@ -23,10 +23,11 @@
</abstract>
<version>1.1</version>
-<date>5 Aug 2003</date>
+<date>2003-08-05</date>
<chapter>
<title>Introduction</title>
+ <section>
<body>
<p>One of the features of PaX is Address Space Layout Randomization (ASLR)
that allows the kernel to randomize the addresses of various areas in
@@ -67,10 +68,12 @@
themselves in the future.</p>
</body>
+ </section>
</chapter>
<chapter>
<title>How to produce ET_DYN ELF executables</title>
+ <section>
<body>
<p>The following discussion assumes that the GNU toolchain (such as gcc and
@@ -114,8 +117,8 @@
care about gcrt1.o). It is no coincidence that crt1.o is not linked into
shared libraries as this object contains (among others) the low-level entry
point and startup code that invokes the C library startup code which in
- turn calls main().
- <warn>Initiating the building of ET_DYN executables on Gentoo does not require us to put -shared in our CFLAGS or LDFLAGS</warn></p>
+ turn calls main(). </p>
+ <warn>Initiating the building of ET_DYN executables on Gentoo does not require us to put -shared in our CFLAGS or LDFLAGS</warn>
<p>Making crt1.o position independent is easy, we just have to make use of the
GOT (in keeping with the tradition of the glibc naming convention for the
@@ -148,20 +151,22 @@
code) they can be compiled once and put into the same directory where
the other systemwide crt* files are.</p>
</body>
+ </section>
</chapter>
<chapter>
<title>ET_DYN ELF executables (The Gentoo Way)</title>
+ <section>
<body>
- <p>On Gentoo this is accomplished by merging <i>hardened-gcc</i>: </p>
+ <p>On Gentoo this is accomplished by merging <c>hardened-gcc</c>: </p>
<pre caption = "Emerging hardened-gcc">
-<c># emerge hardened-gcc</c>
+# <i>emerge hardened-gcc</i>
</pre>
- <p><i>hardened-gcc</i> is an umbrella package for non-mainstream gcc modifications
- The <i>hardened-gcc</i> packages was initially created by Alexander Gabert
+ <p><c>hardened-gcc</c> is an umbrella package for non-mainstream gcc modifications
+ The <c>hardened-gcc</c> packages was initially created by Alexander Gabert
for this special purpose we are serving here: rolling out the etdyn
specs file and interp.o together with the position independent
crt1S.o. But this package is not limited to that purpose.
@@ -184,21 +189,17 @@
one is chpax built as an ET_EXEC.</p>
<pre caption = "Example files">
-<c># file /sbin/chpax</c>
+# <i>file /sbin/chpax</i>
/sbin/chpax: ELF 32-bit LSB shared object, Intel 80386, version 1 \
(GNU/Linux), stripped
/sbin/chpax: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for \
GNU/Linux 2.0.0, dynamically linked (uses shared libs), stripped
</pre>
- </body>
-</chapter>
-
+<!--To keep the bugs down for us we really dont want the
+end user mucking with the specs -solar -->
-<comment>To keep the bugs down for us we really dont want the
-end user mucking with the specs -solar </comment>
-<comment>
- <p>We can further simplify the building of ET_DYN executables by modifying
+<!-- We can further simplify the building of ET_DYN executables by modifying
a few sections of the default gcc specs file as demonstrated in the
specs.2.95.3 and specs.3.2.3 files (for the respective gcc versions).
To use the new specs file we can either replace the default one or pass
@@ -206,12 +207,17 @@
could further trim down the new specs file and keep only the sections
that we changed: *cpp, *cc1, *endfile, *link and *startfile). From now
on invoking gcc as 'gcc -et_dyn' will produce an ET_DYN executable (the
- same goes for g++).</p>
+ same goes for g++).
- <p>Readers interested in rebuilding entire distributions are encouraged to
+ Readers interested in rebuilding entire distributions are encouraged to
take a look at the Adamantix (http://www.adamantix.org) and Hardened
- Gentoo projects (http://www.gentoo.org/proj/en/hardened/).</p>
-</comment>
+ Gentoo projects (http://www.gentoo.org/proj/en/hardened/).
+-->
+ </body>
+ </section>
+</chapter>
+
+
<chapter>
<title>Credits</title>
<section>
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2011-05-04 21:45 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-05-04 21:45 [gentoo-commits] gentoo commit in xml/htdocs/proj/en/hardened: etdyn.xml Francisco Blas Izquierdo Riera (klondike)
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox