Re: Switch on compiler hardening defaults

2009-10-27 Thread Kees Cook
Hi, On Tue, Oct 27, 2009 at 10:19:22PM -0200, Henrique de Moraes Holschuh wrote: > On Tue, 27 Oct 2009, Kees Cook wrote: > > > > It seems the kernel will not be happy if the stack protector is switched > > > > on unconditionally: > > > > > > > > http://osdir.com/ml/linux-kernel/2009-10/msg07064.h

Re: Switch on compiler hardening defaults

2009-10-27 Thread Henrique de Moraes Holschuh
On Tue, 27 Oct 2009, Kees Cook wrote: > > > It seems the kernel will not be happy if the stack protector is switched > > > on unconditionally: > > > > > > http://osdir.com/ml/linux-kernel/2009-10/msg07064.html > > > > Indeed. The kernel build system needs to be able to command whether > > stackp

Re: Switch on compiler hardening defaults

2009-10-27 Thread Bastian Blank
On Mon, Oct 26, 2009 at 09:41:59PM +0100, Christoph Anton Mitterer wrote: > Ever thought about integrating PaX [0] per default in Debian? What features does the grsecurity patch provide currently? I know that several of the mentioned PaX features are supported in vanilla kernel in the meantime: -

Re: Switch on compiler hardening defaults

2009-10-27 Thread Christoph Anton Mitterer
On Tue, 2009-10-27 at 09:32 +0800, Paul Wise wrote: > Any idea if these patches will be merged upstream? It's probably quite unlikely,... although I never understood why,.. Even though it's available for some architectures,.. it would improve security at least on them. Cheers, -- To UNSUBSCRIB

Re: Switch on compiler hardening defaults

2009-10-27 Thread Kees Cook
Hi, On Tue, Oct 27, 2009 at 01:30:12PM -0200, Henrique de Moraes Holschuh wrote: > On Mon, 26 Oct 2009, Gabor Gombas wrote: > > On Mon, Oct 26, 2009 at 11:14:25AM +0100, Bastian Blank wrote: > > > On Sun, Oct 25, 2009 at 11:55:25AM -0700, Kees Cook wrote: > > > > I would like to propose enabling[1

Re: Switch on compiler hardening defaults

2009-10-27 Thread Samuel Thibault
Kees Cook, le Tue 27 Oct 2009 14:11:43 -0700, a écrit : > On Mon, Oct 26, 2009 at 11:14:25AM +0100, Bastian Blank wrote: > > On Sun, Oct 25, 2009 at 11:55:25AM -0700, Kees Cook wrote: > > > I would like to propose enabling[1] the GCC hardening patches that Ubuntu > > > uses[2]. > > > > How do they

Re: Switch on compiler hardening defaults

2009-10-27 Thread Kees Cook
On Mon, Oct 26, 2009 at 11:14:25AM +0100, Bastian Blank wrote: > On Sun, Oct 25, 2009 at 11:55:25AM -0700, Kees Cook wrote: > > I would like to propose enabling[1] the GCC hardening patches that Ubuntu > > uses[2]. > > How do they work? Do they also change the free-standing compiler or only > the

Results for 4.4.2 (Debian 4.4.2-1) testsuite on i486-pc-kfreebsd-gnu

2009-10-27 Thread Matthias Klose
LAST_UPDATED: Obtained from SVN: tags/gcc_4_4_2_release revision 152840 Target: i486-kfreebsd-gnu gcc version 4.4.2 (Debian 4.4.2-1) Native configuration is i486-pc-kfreebsd-gnu === g++ tests === Running target unix === g++ Summary for unix === # of expected p

Results for 4.4.2 (Debian 4.4.2-1) testsuite on x86_64-pc-kfreebsd-gnu

2009-10-27 Thread Matthias Klose
LAST_UPDATED: Obtained from SVN: tags/gcc_4_4_2_release revision 152840 Target: x86_64-kfreebsd-gnu gcc version 4.4.2 (Debian 4.4.2-1) Native configuration is x86_64-pc-kfreebsd-gnu === g++ tests === Running target unix === g++ Summary for unix === # of expect

Re: Switch on compiler hardening defaults

2009-10-27 Thread Henrique de Moraes Holschuh
On Mon, 26 Oct 2009, Gabor Gombas wrote: > On Mon, Oct 26, 2009 at 11:14:25AM +0100, Bastian Blank wrote: > > On Sun, Oct 25, 2009 at 11:55:25AM -0700, Kees Cook wrote: > > > I would like to propose enabling[1] the GCC hardening patches that Ubuntu > > > uses[2]. > > > > How do they work? Do they

[Bug target/41684] [4.4/4.5 regression] binutils testsuite failures when built with 4.4/4.5

2009-10-27 Thread ramana at gcc dot gnu dot org
--- Comment #13 from ramana at gcc dot gnu dot org 2009-10-27 14:58 --- (In reply to comment #0) > when binutils 2.20 branch is built with gcc-4.4 branch or trunk, I see the > following test failures in the ld testsuite. Checked with gcc-4.4 from > debian/testing, debian/unstable and ubu

Please upload gcc-defaults without gnat

2009-10-27 Thread Ludovic Brenta
I have removed gnat from the gcc-defaults package in Subversion and prepared a new gnat source package, per [1]. Could you please upload gcc-defaults to unstable? Alternatively, if you give mee the green light I can upload myself. [1] http://lists.debian.org/debian-gcc/2009/10/msg00030.html --