From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MfDpz-0006gS-RN for garchives@archives.gentoo.org; Sun, 23 Aug 2009 14:14:28 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7E45AE036E; Sun, 23 Aug 2009 14:14:26 +0000 (UTC) Received: from mail-ew0-f218.google.com (mail-ew0-f218.google.com [209.85.219.218]) by pigeon.gentoo.org (Postfix) with ESMTP id 37E89E036E for ; Sun, 23 Aug 2009 14:14:26 +0000 (UTC) Received: by ewy18 with SMTP id 18so1964926ewy.14 for ; Sun, 23 Aug 2009 07:14:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:in-reply-to:references:x-mailer:mime-version :content-type; bh=VveeKcx0CvubYV/+ErkEJNzccf+L3s3fUc31/4cONk4=; b=k0paW78rNRrLuJrQQmaYl1XVUL3MtD+uBaVanJ9XuFfCywKHfjPmfvUxNOT6eEPfI1 v1MNawH9A+JGVuBWAdjVkE+V/qK/rbLpcRu7cnd5NPYfmLAtO3yUXsF3Q+jaOG4YbLXh K9/JJD6sjVQu+s57jDa8TUlp9WjTVotkrwHIs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type; b=CS9b5CG0PmRnbVOr7x9Cm5ukwvnI9E5PtBQEaw0S8xR9izQRcmhkZ993vdx3Rh4Qwt suqvyP3ZAxztUituU11GqPf0Zx0sUrw+JQXimKUSp8PAj9v+eRO0mcQCiD1tzgBcaRuT J6P1Z7/uR/12/Ixzwo/V62XQPEMeeggQsjBfE= Received: by 10.210.136.10 with SMTP id j10mr976576ebd.82.1251036865634; Sun, 23 Aug 2009 07:14:25 -0700 (PDT) Received: from coercion ([91.191.238.58]) by mx.google.com with ESMTPS id 7sm1865013eyb.37.2009.08.23.07.14.24 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 23 Aug 2009 07:14:25 -0700 (PDT) Date: Sun, 23 Aug 2009 20:14:17 +0600 From: Mike Kazantsev To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Opinions on -fstack-protector Message-ID: <20090823201417.071af9fb@coercion> In-Reply-To: <4A9042CE.3000207@f_philipp.fastmail.net> References: <4A9042CE.3000207@f_philipp.fastmail.net> X-Mailer: Claws Mail 3.7.2 (GTK+ 2.16.5; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/zz2OSJ=2JGhxt2qRUoLi0Ky"; protocol="application/pgp-signature" X-Archives-Salt: 6b24d13e-ae99-4f35-95af-33a54af04a5b X-Archives-Hash: 4fcaec4179ca41b0685c33d39a1e092f --Sig_/zz2OSJ=2JGhxt2qRUoLi0Ky Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sat, 22 Aug 2009 21:11:10 +0200 Florian Philipp wrote: > I'm wondering what you think about CFLAGS=3D"-fstack-protector"? Do you > use it on security critical systems? Do you compile your kernel with it > (2.6.30+)? Is the performance decrease noticeable? I might be missing a point, but if you want really secure kernel, why'd you use 2.6.30+ instead of hardened-sources something like PaX and grsecurity? --=20 Mike Kazantsev // fraggod.net --Sig_/zz2OSJ=2JGhxt2qRUoLi0Ky Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (GNU/Linux) iEYEARECAAYFAkqRTr0ACgkQASbOZpzyXnFQ2gCggRMHWtdekNX7vy5kQZjkFM8M 9aAAn0q97B+jH1oZBShmV1rvMiH7j/dK =TYOY -----END PGP SIGNATURE----- --Sig_/zz2OSJ=2JGhxt2qRUoLi0Ky--