| |||||||||||||
Security hardening for DebianSecurity hardening for DebianPosted Feb 7, 2008 21:19 UTC (Thu) by jengelh (subscriber, #33263)Parent article: Security hardening for Debian
-D_FORTIFY_SOURCE, not -D_FORTIFY_SOURCE_. (It takes a value, so is -D_FORTIFY_SOURCE=2 actually, for example.) openSUSE uses FORTIFY_SOURCE for all packages for quite some time now, I am somehow always amazed how some popular distros lag behind simple features. I also remember finding a buffer "overflow" (now corrected) in btrfs 0.10 - but only with -D_FORTIFY_SOURCE=2 (it just did not fire without fortification, and you do not immediately think of running valgrind on everything you get to execute), so this macro is really useful.
(Log in to post comments)
Security hardening for Debian Posted Feb 7, 2008 21:52 UTC (Thu) by nix (subscriber, #2304) [Link] Likewise me, a bug in GNU locate (probably nonexploitable) which only triggers if compiled with -fstack-protector-all... (that has quite a hefty performance hit, like PIE, so I only enable it for Internet-facing services, and for everything in my firewall VMs.)
|
|||||||||||||