[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 13 Nov 2015 09:55:35 +0100
From: HacKurx <hackurx@...il.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: Binary blobs
Le 2015-11-13 09:07, Daniel Micay a écrit :
>> all hardened options for GCC.
>
> Well, you probably can't get away with -fsanitize=undefined
> -fsanitize-undefined-trap-on-error yet (object-size and
> signed-integer-overflow checks specifically). I know what you mean
> though :).
Yes you are right, it is easy to have a warning but not a correction.
But with mprotect and:
CFLAGS="-fstack-protector --param=ssp-buffer-size=4 -Wformat
-Wformat-security -Werror=format-security"
CPPFLAGS="-D_FORTIFY_SOURCE=2"
LDFLAGS="-Wl,-z,relro"
It's already better than the official release :D
--
Best regards,
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
