Hi, -fstack-check seems to be kind of broken on gcc right now:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=68065 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66479 it's a no-op for clang IIRC Regards, Rasmus -------- Original Message -------- On 20 Jun 2017, 07:50, Adam Carter wrote: Given; https://www.theregister.co.uk/2017/06/20/stack_clash_linux_local_root_holes/ would it make sense to add -fstack-check to CFLAGS and rebuild everything, starting with packages that install suid root binary(ies)?