Re: [PATCH v3 2/2] provide -fstack-protector-strong build option

2013-12-18 Thread Ingo Molnar
* Kees Cook wrote: > This changes the stack protector config option into a choice of "None", > "Regular", and "Strong". For "Strong", the kernel is built with > -fstack-protector-strong (gcc 4.9 and later). This options increases > the coverage of the stack protector without the heavy performanc

[PATCH v3 2/2] provide -fstack-protector-strong build option

2013-12-17 Thread Kees Cook
This changes the stack protector config option into a choice of "None", "Regular", and "Strong". For "Strong", the kernel is built with -fstack-protector-strong (gcc 4.9 and later). This options increases the coverage of the stack protector without the heavy performance hit of -fstack-protector-all