[arch-general] Changing compilation flags

Pablo Roberto Lezaeta Reyes prflr88 at gmail.com
Sat Jul 1 09:54:25 UTC 2017

>On 2016-10-24 05:56, Allan McRae wrote:
>*> 1) building gcc to enable PIE by default
>I am in the middle of rebuilding gcc with --enable-default-pie. When it
>finishes, I will start a todo for rebuilding packages with static libraries.
>I also enabled --enable-default-ssp, which means that
>-fstack-protector-strong will be dropped from our CFLAGS (as it will be
>enforced by gcc) on the next opportunity.

Does the -enable-default-ssp enforce also -fstack-check=specific to protect
from stack clash [1], gentoo do it (except on vlc and tcl which not build
but those are upstream bugs) [2]

[1] https://blog.qualys.com/securitylabs/2017/06/19/the-stack-clash
[2] https://wiki.gentoo.org/wiki/Hardened/Gentoo_Hardened_and_Stack_Clash

*Pablo Lezaeta*

More information about the arch-general mailing list