Ports now support enabling Stack Protector [1] support on FreeBSD 10 i386 and amd64, and older releases on amd64 only currently.
Support may be added for earlier i386 releases once all ports properly respect LDFLAGS. To enable, just add WITH_SSP=yes to your make.conf and rebuild all ports. The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all may optionally be set instead. Please help test this on your system. We would like to eventually enable this by default, but need to identify any major ports that have run-time issues due to it. [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection -- Regards, Bryan Drewery
signature.asc
Description: OpenPGP digital signature