commit:     9a35d09be877f957c46fa374be9d2d3f0b3390ba
Author:     Richard Yao <ryao <AT> gentoo <DOT> org>
AuthorDate: Tue Aug 11 20:46:29 2015 +0000
Commit:     Richard Yao <ryao <AT> gentoo <DOT> org>
CommitDate: Tue Aug 11 20:46:29 2015 +0000
URL:        https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=9a35d09b

Disable stack protection by default

I had intended for this feature to catch bugs in the kernel that
involved stack corruption so that there would be a chance of debugging
them, but Rick Farina is strongly against turning this on unless it is
the strong version, which we cannot turn on until GCC 4.9+ becomes
widespread. I am turning this off because the controversy is simply not
worth it, but this is a bad decision.

Signed-off-by: Richard Yao <ryao <AT> gentoo.org>

 defaults/kernel-generic-config | 1 -
 1 file changed, 1 deletion(-)

diff --git a/defaults/kernel-generic-config b/defaults/kernel-generic-config
index 3738e47..1092aa3 100644
--- a/defaults/kernel-generic-config
+++ b/defaults/kernel-generic-config
@@ -4075,7 +4075,6 @@ CONFIG_RING_BUFFER_BENCHMARK=m
 # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set
 
 CONFIG_SECCOMP=y
-CONFIG_CC_STACKPROTECTOR_REGULAR=y
 CONFIG_HZ_1000=y
 CONFIG_NO_HZ=y
 CONFIG_NO_HZ_IDLE=y

Reply via email to