Re: Integrating ProPolice/SSP into FreeBSD

On Fri, 26 May 2006 17:34:22 +0200
Jeremie Le Hen <jeremie@xxxxxxxxxx> wrote:

Hi,

first sorry for cross-posting but I thought this patch might interest
-CURRENT users as well as people concerned by security.

I wrote a patch that integrates ProPolice/SSP into FreeBSD, one step
further than it has been realized so far.

It is available here :
http://tataz.chchile.org/~tataz/FreeBSD/SSP/

Everything is explained on the web page, but I will repeat some
informations here. The patchset is splitted in two parts to ease the
review of the patch. The -propolice patch is only the original
ProPolice patch for GCC 3.4.4 applied on FreeBSD source tree. The
-freebsd patch contains the glue I have written to make things neat.

The patch exists in both for CURRENT and RELENG_6. Both introduce a
new make.conf(5) (and src.conf(5)) knob to enable stack protection
on a per Makefile basis. It if of course possible to compile your
world with it. Please refer to the web page for more informations.

The patch has been tested and works pretty well. My laptop and my
workstation at work are compiled with SSP : world, kernel and ports,
including X.org.

I hope you will enjoy it.
Regards,
--
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to
"freebsd-security-unsubscribe@xxxxxxxxxxx"

How does this compare to GCC 4.x mudflap feature? I do not plan to
include Propolice patch into base system any time soon and will object
anyone trying to do so due to future maintenance headaches this will
inevitably create. GCC 4.1.1 import is in the works though and should be
available shortly.

--
Alexander Kabaev

Attachment: signature.asc
Description: PGP signature

Relevant Pages

  • Re: [fbsd] Re: Integrating ProPolice/SSP into FreeBSD
    ... Jeremie Le Hen wrote: ... I wrote a patch that integrates ProPolice/SSP into FreeBSD, ... ProPolice patch for GCC 3.4.4 applied on FreeBSD source tree. ...
    (FreeBSD-Security)
  • Re: [fbsd] Re: Integrating ProPolice/SSP into FreeBSD
    ... Jeremie Le Hen wrote: ... I wrote a patch that integrates ProPolice/SSP into FreeBSD, ... ProPolice patch for GCC 3.4.4 applied on FreeBSD source tree. ...
    (freebsd-current)
  • looking for a patch to increase maximum routing table numnber
    ... patch, or send me a copy attached by email. ... Jeremie Le Hen ... < jeremie at le-hen dot org>< ttz at chchile dot org> ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)
  • Re: packet order, ipf or ipfw
    ... On Thu, 29 Jul 2004, Jeremie Le Hen wrote: ... >> feature. ... >> So, what is the order, if I'm running ipf AND ipfw at the same time? ... the patch in the above PR changes it to: ...
    (freebsd-net)
  • Re: Cant get MAC addr of an ed(4) adapter
    ... clearly an oversight on the rascal that's responsible for the ... I tested the patch on my friend's computer, ... Jeremie Le Hen ... < jeremie at le-hen dot org>< ttz at chchile dot org> ...
    (freebsd-current)