From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 15516138247 for ; Thu, 9 Jan 2014 22:21:32 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5DBEFE0C8D; Thu, 9 Jan 2014 22:21:27 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 7185CE0C5A for ; Thu, 9 Jan 2014 22:21:26 +0000 (UTC) Received: from localhost (77-254-165-29.adsl.inetia.pl [77.254.165.29]) (using SSLv3 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id 9138733F49F; Thu, 9 Jan 2014 22:21:23 +0000 (UTC) Date: Thu, 9 Jan 2014 23:21:16 +0100 From: =?UTF-8?B?TWljaGHFgiBHw7Nybnk=?= To: gentoo-dev@lists.gentoo.org Cc: blueness@gentoo.org Subject: Re: [gentoo-dev] [PATCH] To enable ssp default in Gcc the toolchain.eclass need some changes. Message-ID: <20140109232116.398080f1@gentoo.org> In-Reply-To: <52CF1D7C.4030700@gentoo.org> References: <7554031.Sacz2dxc8i@laptop1.gw.ume.nu> <1389304629.424.44.camel@belkin5> <52CF1D7C.4030700@gentoo.org> Organization: Gentoo X-Mailer: Claws Mail 3.9.3 (GTK+ 2.24.22; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/_OzouSok5_zKLMTVScXb_23"; protocol="application/pgp-signature" X-Archives-Salt: a179b062-b066-4cd7-b2cd-cf95188cb4d1 X-Archives-Hash: 0996593ed201ae34c39996f090720ea9 --Sig_/_OzouSok5_zKLMTVScXb_23 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Dnia 2014-01-09, o godz. 17:06:52 "Anthony G. Basile" napisa=C5=82(a): > On 01/09/2014 04:57 PM, Pacho Ramos wrote: > > What are the advantages of disabling SSP to deserve that "special" > > handling via USE flag or easily disabling it appending the flag? >=20 > There are some cases where ssp could break things. I know of once case=20 > right now, but its somewhat exotic. Also, sometimes we *want* to break=20 > things for testing. I'm thinking here of instance where we want to test= =20 > a pax hardened kernel to see if it catches abuses of memory which would=20 > otherwise be caught by executables emitted from a hardened toolchain. =20 > Take a look at the app-admin/paxtest suite. Just to be clear, are we talking about potential system-wide breakage or single, specific packages being broken by SSP? In other words, are there cases when people will really want to disable SSP completely? Unless I'm misunderstanding something, your examples sound like you just want -fno-stack-protector per-package. I don't really think you actually want to rebuild whole gcc just to do some testing on a single package... --=20 Best regards, Micha=C5=82 G=C3=B3rny --Sig_/_OzouSok5_zKLMTVScXb_23 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQJ8BAEBCgBmBQJSzyDcXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2REJCMDdDQzRGMERBRDA2RUEwQUZFNDFC MDdBMUFFQUVGQjQ0NjRFAAoJELB6GurvtEZON2QP/A4prfCQssyL1YyThXf0Y3oO L7E/MPQmC5u0XXXPEztfzvNcAVT77tLBnmjRbLftVJi97rmWxm5SsnybgehO/yE8 sBd1rDGHQ0VBl7o3VGtcTuQze9jJ43828HjmX4HyKdluMbUiH/CWs+P/4wJnxeiR JepbmTXip9HOuJPnXGecPHyhtqUnu+43Ky6MJ+wLBnl57EAQaQjJLhwjZnjKtS1y QWuPeWDY4McXRbS/6LK4Vu5yT7/Z/OJpK2VJ37yWM2S505VKJ3NJZAqJNZsPfLvw h5QCfpscFtD2iqZmTc2zni2JvC7vV0aGh/UZdaSkp7OjIFUKPuSo6wVJWa6l/hXQ suVWdigIzKk/odWYHQKHJvYHStwDYc/fKCo5ETHp8uwy0GZbdusvKrXj11bu1JNO hh5Xx0a6GT/GUxmytZKnj65JzlfvxKO1jh80GVlye7V3bnscI0XOzfDizgG8S/Yq Ft+HabySTCe8UIS4qKfOTUBWUh3a5DlDozyLdNwdqLvRDD8w476HkMIVTrjQlDR1 CTMqTYbrSdUihS3wQ3383Yr1wNw1UQ8sNn9bg9B6IdkysRbo6sMVl3vRWfkPv6BS nUDaQhsv5ZNJ1A7FaStDXi/nBi1d4bwvrS0f8WsmML7cV4OeHyGHb8W2q2JYRsZ+ y1RD+8ChaSOZ2uvkg3Ay =v0Ah -----END PGP SIGNATURE----- --Sig_/_OzouSok5_zKLMTVScXb_23--