From: "Rick \"Zero_Chaos\" Farina" <zerochaos@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Re: Improve the security of the default profile
Date: Fri, 06 Sep 2013 23:48:40 -0400 [thread overview]
Message-ID: <522AA218.8000005@gentoo.org> (raw)
In-Reply-To: <201309050706.13467.vapier@gentoo.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 09/05/2013 07:06 AM, Mike Frysinger wrote:
> On Thursday 05 September 2013 06:13:28 Agostino Sarubbo wrote:
>> during an irc debate, me and other people just noticed that the default
>> profile could use more flags to enhance the security.
>>
>> An hint is here:
>> https://wiki.ubuntu.com/ToolChain/CompilerFlags
>>
>> Please argue about what we _don't_ use.
>
> the only thing we don't use by default is SSP. and we have hardened for that.
>
> fairly certain the other flags we've been using in Gentoo for years.
> -mike
>
Since I don't see this in the profile and I know almost nothing about
how the toolchain works, perhaps you could grace us with how to see the
fact that "we've been using in Gentoo for years" :-)
Thanks,
Zero
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.20 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=yb4E
-----END PGP SIGNATURE-----
next prev parent reply other threads:[~2013-09-07 3:48 UTC|newest]
Thread overview: 45+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-09-05 10:13 [gentoo-dev] Improve the security of the default profile Agostino Sarubbo
2013-09-05 10:47 ` Tom Wijsman
2013-09-05 10:54 ` Agostino Sarubbo
2013-09-05 11:09 ` Tom Wijsman
2013-09-05 11:58 ` Agostino Sarubbo
2013-09-05 13:33 ` Rich Freeman
2013-09-05 10:54 ` Sergey Popov
2013-09-05 11:06 ` [gentoo-dev] " Mike Frysinger
2013-09-07 3:48 ` Rick "Zero_Chaos" Farina [this message]
2013-09-07 6:36 ` Parker Schmitt
2013-09-05 12:09 ` [gentoo-dev] " Ciaran McCreesh
2013-09-05 12:38 ` Tom Wijsman
2013-09-07 18:24 ` [gentoo-dev] " Martin Vaeth
2013-09-07 17:25 ` Ryan Hill
2013-09-07 18:10 ` Martin Vaeth
[not found] ` < 20130907151110.13ebc8a2@caribou.gateway.2wire.net>
2013-09-07 18:37 ` Rich Freeman
2013-09-07 18:50 ` Pacho Ramos
2013-09-07 19:52 ` Martin Vaeth
2013-09-07 21:11 ` Ryan Hill
2013-09-07 23:08 ` Rick "Zero_Chaos" Farina
2013-09-07 23:12 ` Rich Freeman
2013-09-08 14:12 ` Hinnerk van Bruinehsen
2013-09-09 0:06 ` Ryan Hill
2013-09-09 12:11 ` Martin Vaeth
2013-09-09 12:21 ` Rich Freeman
2013-09-10 3:00 ` Ryan Hill
2013-09-10 3:46 ` Peter Stuge
2013-09-11 22:04 ` Magnus Granberg
2013-09-10 17:50 ` Jeroen Roovers
2013-09-10 22:41 ` Richard Yao
2013-09-11 1:17 ` Rich Freeman
2013-09-12 15:03 ` Richard Yao
2013-09-12 15:12 ` Richard Yao
2013-09-11 6:07 ` Ryan Hill
2013-09-11 18:23 ` Magnus Granberg
2013-09-12 15:07 ` Richard Yao
[not found] ` <522FA01E.4070602 @gentoo.org>
[not found] ` <CAGfcS_=VwAT0xYAny9hfd3tpRM61dt39Zcm7p0N8_pLzeyw1FQ@mail. gmail.com>
2013-09-11 4:49 ` Duncan
2013-09-11 6:49 ` Ryan Hill
2013-09-11 18:48 ` Magnus Granberg
2013-09-08 11:05 ` Martin Vaeth
2013-09-09 3:24 ` Ryan Hill
2013-09-08 11:24 ` Martin Vaeth
2013-09-12 15:23 ` Anthony G. Basile
2013-09-13 6:08 ` Ryan Hill
2013-09-07 19:50 ` Rick "Zero_Chaos" Farina
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=522AA218.8000005@gentoo.org \
--to=zerochaos@gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox