Re: "-fstack-clash-protection" option

2019-01-15 Thread Hideki Yamane
On Tue, 15 Jan 2019 12:06:10 +0100 Florian Weimer wrote: > > I've read systemd's vulnerability article [1] and then I have > > a question, do we have any plan to enable "-fstack-clash-protection" > > by default? I cannot find any discussion about it. > > There's a bug report requesting a build

Re: "-fstack-clash-protection" option

2019-01-15 Thread Florian Weimer
* Hideki Yamane: > I've read systemd's vulnerability article [1] and then I have > a question, do we have any plan to enable "-fstack-clash-protection" > by default? I cannot find any discussion about it. There's a bug report requesting a build flags change:

"-fstack-clash-protection" option

2019-01-14 Thread Hideki Yamane
Hi, I've read systemd's vulnerability article [1] and then I have a question, do we have any plan to enable "-fstack-clash-protection" by default? I cannot find any discussion about it. [1] https://www.zdnet.com/article/new-linux-systemd-security-holes-uncovered/ -- Hideki Yamane