| View previous topic :: View next topic |
| Author |
Message |
blind_oracle
n00b
Joined: 02 Feb 2007
Posts: 13
Location: Russia, Moscow
|
 Posted: Sat Mar 08, 2008 11:01 am Post subject: What 'hardened' Postfix flag is for? |
 |
|
Reading an ebuild didn't cleared much. The only reference to it is a workaround for some bug in old GCC 3.4.4 or so...
Any ideas? |
|
| Back to top |
|
 |
bunder
Bodhisattva
Joined: 10 Apr 2004
Posts: 5947
|
| Posted: Sat Mar 08, 2008 11:02 am Post subject: |
|
|
http://www.gentoo.org/proj/en/hardened/
that should clear things up a little...
cheers
_________________
| Neddyseagoon wrote: | | The problem with leaving is that you can only do it once and it reduces your influence. |
banned from #gentoo since sept 2017 |
|
| Back to top |
|
|
blind_oracle
n00b
Joined: 02 Feb 2007
Posts: 13
Location: Russia, Moscow
|
| Posted: Sat Mar 08, 2008 12:13 pm Post subject: |
|
|
Yep, i know what 'hardened gentoo' project in a whole is 
I want to know what postfix's hardened use flag does in specific.
For example, hardened GCC obtains stack smashing protection, PIE, etc.
What effect this flag have on Postfix? |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 23064
|
| Posted: Sat Mar 08, 2008 7:20 pm Post subject: |
|
|
| The ebuild references bug 76512 for that flag. Based on the comments in the bug, it appears that gcc 3.4.x has a wrong-code bug when compiling Postfix with the stack-smash-protector and any optimization level other than -Os. The ebuild was modified to filter other optimization levels so that the hardened compiler would not generate wrong code. |
|
| Back to top |
|
|
blind_oracle
n00b
Joined: 02 Feb 2007
Posts: 13
Location: Russia, Moscow
|
| Posted: Sat Mar 08, 2008 8:52 pm Post subject: |
|
|
Yep, i read that bug thread.
So, on modern(gcc 4.x.x) non-hardened profile this flag does absolutely nothing?
Then why it's not hard-masked on non-hardened profiles?.. Strange. |
|
| Back to top |
|
|
|
Networking & Security
