On 2016-10-24 05:56, Allan McRae wrote: *> 1) building gcc to enable PIE by default
I am in the middle of rebuilding gcc with --enable-default-pie. When it finishes, I will start a todo for rebuilding packages with static libraries.
I also enabled --enable-default-ssp, which means that -fstack-protector-strong will be dropped from our CFLAGS (as it will be enforced by gcc) on the next opportunity.
Does the -enable-default-ssp enforce also -fstack-check=specific to protect from stack clash , gentoo do it (except on vlc and tcl which not build but those are upstream bugs)