Revision: 6722 http://ipcop.svn.sourceforge.net/ipcop/?rev=6722&view=rev Author: gespinasse Date: 2012-07-30 15:55:00 +0000 (Mon, 30 Jul 2012) Log Message: ----------- Parsing the log with something like grep -rE 'gcc | cc ' log_i486 | grep -v ' -O' | grep -v checking >mylog
and discounting every link command, I find that mdmadm and beep have no optimization level set, so with 0, FORTIFY did not apply. Unfortunately scanelf did not check for fortify yet but that could be done manually with readelf -sW <file> | grep -v '__stack_chk_fail' | grep '__.*_chk' Modified Paths: -------------- ipcop/trunk/lfs/beep ipcop/trunk/lfs/mdadm ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0 Modified: ipcop/trunk/lfs/beep =================================================================== --- ipcop/trunk/lfs/beep 2012-07-30 13:28:56 UTC (rev 6721) +++ ipcop/trunk/lfs/beep 2012-07-30 15:55:00 UTC (rev 6722) @@ -82,7 +82,8 @@ @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && make + # FLAGS= is required to set the optimization level or -O0 is used and FORTIFY does not apply + cd $(DIR_APP) && make FLAGS="$(CFLAGS) -Wall" cd $(DIR_APP) && install -m 0755 beep /usr/bin @rm -rf $(DIR_APP) Modified: ipcop/trunk/lfs/mdadm =================================================================== --- ipcop/trunk/lfs/mdadm 2012-07-30 13:28:56 UTC (rev 6721) +++ ipcop/trunk/lfs/mdadm 2012-07-30 15:55:00 UTC (rev 6722) @@ -82,7 +82,8 @@ @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && make -j $(PARALLELISM) + # CXFLAGS="$(CFLAGS)" is required to set the optimization level or -O0 is used and FORTIFY does not apply + cd $(DIR_APP) && make -j $(PARALLELISM) CXFLAGS="$(CFLAGS)" ifeq "$(RUNNING_TEST)" "yes" # not yet ready : TODO we need a way to modprobe md_mod outside of our chroot (so in make.sh as root) Modified: ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0 =================================================================== --- ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0 2012-07-30 13:28:56 UTC (rev 6721) +++ ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0 2012-07-30 15:55:00 UTC (rev 6722) @@ -92,6 +92,9 @@ /bin/sh /bin/bash ## +## beeep recompiled with -Os and FORTIFY +/usr/bin/beeep +## ## bind-9.8.3-P2 /usr/bin/dig /usr/bin/host This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Ipcop-svn mailing list Ipcop-svn@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/ipcop-svn