Re: cvs commit: src/sys/boot/ficl Makefile src/sys/boot/i386 Makefile.inc src/sys/conf Makefile.i386

[David Rhodus <sdrhodus@xxxxxxxxx>]

On Apr 6, 2005 6:49 PM, Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx> wrote:
> :
> :Matthew Dillon wrote:
> :> dillon      2005/04/05 15:36:33 PDT
> :>
> :> DragonFly src repository
> :>
> :>   Modified files:
> :>     sys/boot/ficl        Makefile
> :>     sys/boot/i386        Makefile.inc
> :>     sys/conf             Makefile.i386
> :>   Log:
> :>   Make sure neither the boot loader nor the kernel is compiled with the
> :>   stack protector.
> :I understand this for bootloader, but why the same for kernel? Why not
> :have all the help one can get? Having several layers of protection is
> :good. I have problems with bootloader on few boxes, but never had any
> :problems for the rest of the system (except fetch and some ftp sites).
> :
> :Toma¾
> 
>     I trust the stack protection code in GCC about as far as I can throw
>     my work desk.  And since my work desk is attached to the wall of my
>     work room, that isn't very far.
> 
>                                         -Matt

I think we should just turn it off by default entirely.

-DR