Re: Disabling SSP for one package

Alex Xu <alex_y_xu-FFYn/[email protected]> Tue, 17 Dec 2013 08:57:29 -0500

Newsgroups	gmane.linux.gentoo.hardened
Message-ID	<[email protected]>

On 17/12/13 08:44 AM, Michael Orlitzky wrote:
> I'm hitting a nasty bug with SSP/PHP:
> 
>   https://bugs.gentoo.org/show_bug.cgi?id=491100
> 
> Recompiling PHP with hardenednossp fixes the problem, but on this one
> server we're recompiling PHP a lot (as we figure out which extensions
> are needed to migrate a bunch of classic ASP sites).
> 
> Supposing I'm very forgetful, what's the best way to prevent myself from
> rebuilding PHP with SSP? Copy the ebuild to an overlay and locally mask
> newer versions?
> 

Can't you do CFLAGS=-fno-stack-protector in p.env?

signature.asc (application/pgp-signature, 836 B)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=OsgP
-----END PGP SIGNATURE-----