DragonFly commits List (threaded) for 2005-04
Re: cvs commit: src/sys/boot/ficl Makefile src/sys/boot/i386 Makefile.inc src/sys/conf Makefile.i386
On Apr 6, 2005 6:49 PM, Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx> wrote:
> :Matthew Dillon wrote:
> :> dillon 2005/04/05 15:36:33 PDT
> :> DragonFly src repository
> :> Modified files:
> :> sys/boot/ficl Makefile
> :> sys/boot/i386 Makefile.inc
> :> sys/conf Makefile.i386
> :> Log:
> :> Make sure neither the boot loader nor the kernel is compiled with the
> :> stack protector.
> :I understand this for bootloader, but why the same for kernel? Why not
> :have all the help one can get? Having several layers of protection is
> :good. I have problems with bootloader on few boxes, but never had any
> :problems for the rest of the system (except fetch and some ftp sites).
> I trust the stack protection code in GCC about as far as I can throw
> my work desk. And since my work desk is attached to the wall of my
> work room, that isn't very far.
I think we should just turn it off by default entirely.