Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 10 Nov 2011 23:33:09 +0400
From: Solar Designer <solar@...nwall.com>
To: owl-dev@...ts.openwall.com
Subject: Re: %optflags for new gcc

Dmitry, all -

On Mon, Nov 07, 2011 at 12:29:04AM +0400, Solar Designer wrote:
> I guess -D_FORTIFY_SOURCE=2 and -fstack-protector would cause issues
> when building kernel modules.  Did ALT Linux receive (m)any problem
> reports from users trying to build additional kernel modules, such as
> hardware vendors'?  How do you recommend we deal with this?

-fstack-protector is only enabled by default when -nostdlib is not
specified.  Perhaps this is what helps with kernel module builds, which
do specify -nostdlib (or at least are supposed to).  As to
-D_FORTIFY_SOURCE=2, it just should not matter when glibc's header files
are not included.

So I guess kernel module builds do work despite of these new defaults.

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ