| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
Security hardening for Debian
Security hardening for Debian
Posted Feb 7, 2008 21:19 UTC (Thu) by jengelh (subscriber, #33263)Parent article: Security hardening for Debian
-D_FORTIFY_SOURCE, not -D_FORTIFY_SOURCE_. (It takes a value, so is -D_FORTIFY_SOURCE=2 actually, for example.) openSUSE uses FORTIFY_SOURCE for all packages for quite some time now, I am somehow always amazed how some popular distros lag behind simple features. I also remember finding a buffer "overflow" (now corrected) in btrfs 0.10 - but only with -D_FORTIFY_SOURCE=2 (it just did not fire without fortification, and you do not immediately think of running valgrind on everything you get to execute), so this macro is really useful.
(Log in to post comments)
Security hardening for Debian
Posted Feb 7, 2008 21:52 UTC (Thu) by nix (subscriber, #2304) [Link]
Likewise me, a bug in GNU locate (probably nonexploitable) which only triggers if compiled with -fstack-protector-all... (that has quite a hefty performance hit, like PIE, so I only enable it for Internet-facing services, and for everything in my firewall VMs.)