Re: cvs commit: src/sys/boot/ficl Makefile src/sys/boot/i386 Mak
On Apr 6, 2005 6:49 PM, Matthew Dillon <dillon@apollo.backplane.com> wrote:
> :
> :Matthew Dillon wrote:
> :> dillon 2005/04/05 15:36:33 PDT
> :>
> :> DragonFly src repository
> :>
> :> Modified files:
> :> sys/boot/ficl Makefile
> :> sys/boot/i386 Makefile.inc
> :> sys/conf Makefile.i386
> :> Log:
> :> Make sure neither the boot loader nor the kernel is compiled with the
> :> stack protector.
> :I understand this for bootloader, but why the same for kernel? Why not
> :have all the help one can get? Having several layers of protection is
> :good. I have problems with bootloader on few boxes, but never had any
> :problems for the rest of the system (except fetch and some ftp sites).
> :
> :Toma븊>
> I trust the stack protection code in GCC about as far as I can throw
> my work desk. And since my work desk is attached to the wall of my
> work room, that isn't very far.
>
> -Matt
I think we should just turn it off by default entirely.
-DR
討論串 (同標題文章)
完整討論串 (本文為第 4 之 8 篇)：