Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 25 Mar 2015 10:01:31 +0300
From: Alexander Cherepanov <ch3root@...nwall.com>
To: john-dev@...ts.openwall.com
Subject: Re: Ideas for the robustness gsoc task

On 2015-03-25 09:19, Kai Zhao wrote:
>> - Hardened build
>
> Could you detailedly describe the "Hardened build"?

-- gcc -fstack-protector-all (check which one we want)
-- gcc -D_FORTIFY_SOURCE=2
-- gcc -fPIE -pie
-- gcc -Wl,-z,relro -Wl,-z,now

Some of these could make a program slower so benchmarks are required.

-- 
Alexander Cherepanov

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ