042df2e2da
- It is opt-out for now so as to give it maximum testing, but it may be turned opt-in for stable branches depending on the consensus. You can turn it off with WITHOUT_SSP. - WITHOUT_SSP was previously used to disable the build of GNU libssp. It is harmless to steal the knob as SSP symbols have been provided by libc for a long time, GNU libssp should not have been much used. - SSP is disabled in a few corners such as system bootstrap programs (sys/boot), process bootstrap code (rtld, csu) and SSP symbols themselves. - It should be safe to use -fstack-protector-all to build world, however libc will be automatically downgraded to -fstack-protector because it breaks rtld otherwise. - This option is unavailable on ia64. Enable GCC stack protection (aka Propolice) for kernel: - It is opt-out for now so as to give it maximum testing. - Do not compile your kernel with -fstack-protector-all, it won't work. Submitted by: Jeremie Le Hen <jeremie@le-hen.org> |
||
|---|---|---|
| .. | ||
| makeman | ||
| WITH_BIND_LIBS | ||
| WITH_GNU_CPIO | ||
| WITH_HESIOD | ||
| WITH_IDEA | ||
| WITHOUT_ACPI | ||
| WITHOUT_ASSERT_DEBUG | ||
| WITHOUT_ATM | ||
| WITHOUT_AUDIT | ||
| WITHOUT_AUTHPF | ||
| WITHOUT_BIND | ||
| WITHOUT_BIND_DNSSEC | ||
| WITHOUT_BIND_ETC | ||
| WITHOUT_BIND_LIBS_LWRES | ||
| WITHOUT_BIND_MTREE | ||
| WITHOUT_BIND_NAMED | ||
| WITHOUT_BIND_UTILS | ||
| WITHOUT_BLUETOOTH | ||
| WITHOUT_BOOT | ||
| WITHOUT_BSD_CPIO | ||
| WITHOUT_BZIP2 | ||
| WITHOUT_BZIP2_SUPPORT | ||
| WITHOUT_CALENDAR | ||
| WITHOUT_CDDL | ||
| WITHOUT_CPP | ||
| WITHOUT_CRYPT | ||
| WITHOUT_CVS | ||
| WITHOUT_CXX | ||
| WITHOUT_DICT | ||
| WITHOUT_DYNAMICROOT | ||
| WITHOUT_EXAMPLES | ||
| WITHOUT_FORTH | ||
| WITHOUT_FP_LIBC | ||
| WITHOUT_GAMES | ||
| WITHOUT_GCOV | ||
| WITHOUT_GDB | ||
| WITHOUT_GNU | ||
| WITHOUT_GNU_GREP | ||
| WITHOUT_GNU_SUPPORT | ||
| WITHOUT_GPIB | ||
| WITHOUT_GROFF | ||
| WITHOUT_GSSAPI | ||
| WITHOUT_HTML | ||
| WITHOUT_INET6 | ||
| WITHOUT_INET6_SUPPORT | ||
| WITHOUT_INFO | ||
| WITHOUT_INSTALLLIB | ||
| WITHOUT_IPFILTER | ||
| WITHOUT_IPX | ||
| WITHOUT_IPX_SUPPORT | ||
| WITHOUT_KERBEROS | ||
| WITHOUT_KERBEROS_SUPPORT | ||
| WITHOUT_KVM | ||
| WITHOUT_KVM_SUPPORT | ||
| WITHOUT_LIB32 | ||
| WITHOUT_LIBPTHREAD | ||
| WITHOUT_LIBTHR | ||
| WITHOUT_LOCALES | ||
| WITHOUT_LPR | ||
| WITHOUT_MAILWRAPPER | ||
| WITHOUT_MAN | ||
| WITHOUT_NCP | ||
| WITHOUT_NETCAT | ||
| WITHOUT_NIS | ||
| WITHOUT_NLS | ||
| WITHOUT_NLS_CATALOGS | ||
| WITHOUT_NS_CACHING | ||
| WITHOUT_OBJC | ||
| WITHOUT_OPENSSH | ||
| WITHOUT_OPENSSL | ||
| WITHOUT_PAM | ||
| WITHOUT_PAM_SUPPORT | ||
| WITHOUT_PF | ||
| WITHOUT_PROFILE | ||
| WITHOUT_RCMDS | ||
| WITHOUT_RCS | ||
| WITHOUT_RESCUE | ||
| WITHOUT_SENDMAIL | ||
| WITHOUT_SETUID_LOGIN | ||
| WITHOUT_SHAREDOCS | ||
| WITHOUT_SSP | ||
| WITHOUT_SYMVER | ||
| WITHOUT_SYSCONS | ||
| WITHOUT_TCSH | ||
| WITHOUT_TOOLCHAIN | ||
| WITHOUT_USB | ||
| WITHOUT_WPA_SUPPLICANT_EAPOL | ||
| WITHOUT_ZFS | ||
| WITHOUT_ZONEINFO | ||