Changes in WITHOUT_SSP

07423969869c2034d1e70439ae5d70ddd390bf17 - src.conf.5: Update xref for SSP description

Thu, 23 Jan 2025 14:02:31 +0000

src.conf.5: Update xref for SSP descriptionSSP is currently documented in migitations.7.Fixes: 297bb39b6f0f ("mitigations.7: move SSP documentation from security.7 to here")Reviewed by: kevansSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D48620 List of files: /src/tools/build/options/WITHOUT_SSP

9bfd3b4076a7b0dfd27ab22318e5113dc84fea28 - Add a build knob for _FORTIFY_SOURCE

Mon, 13 May 2024 05:23:50 +0000

Add a build knob for _FORTIFY_SOURCEIn the future, we will Default to _FORTIFY_SOURCE=2 if SSP is enabled,otherwise default to _FORTIFY_SOURCE=0. For now we default it to 0unconditionally to ease bisect across older versions without the newsymbols, and we'll put out a call for testing.include/*.h include their ssp/*.h equivalents as needed based on theknob. Programs and users are allowed to override FORTIFY_SOURCE in theirMakefiles or src.conf/make.conf to force it off.Reviewed by: des, markjRelnotes: yesSponsored by: StormshieldSponsored by: Klara, Inc.Differential Revision: https://reviews.freebsd.org/D32308 List of files: /src/tools/build/options/WITHOUT_SSP

b461276d75488fe50c1503db85d43cbb8c3c3067 - Update WITH_/WITHOUT_SSP descriptions

Wed, 30 Aug 2023 20:49:44 +0000

Update WITH_/WITHOUT_SSP descriptionsProPolice refers to a specific implementation by Hiroaki Etoh andKunikazu Yoda. The implementation in contemporary Clang and GCC issomewhat different and newer, so use a generic term in the src.confdescriptions.Sponsored by: The FreeBSD Foundation List of files: /src/tools/build/options/WITHOUT_SSP

b2c76c41be32f904179efed29c0ca04d53f3996c - Remove $FreeBSD$: one-line nroff pattern

Wed, 16 Aug 2023 17:55:15 +0000

Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_SSP

9d178c925fb9acd88d2e5c5145d639b30b398c12 - Drop 'Set to' from most src.conf(5) knobs

Sat, 10 Apr 2021 02:23:03 +0000

Drop 'Set to' from most src.conf(5) knobsThe description is clearly what effect the knob has when set, so theadditional text was unnecessary.Reviewed by: jhb, seSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D29583 List of files: /src/tools/build/options/WITHOUT_SSP

07423969869c2034d1e70439ae5d70ddd390bf17 - src.conf.5: Update xref for SSP description

Thu, 23 Jan 2025 14:02:31 +0000

9bfd3b4076a7b0dfd27ab22318e5113dc84fea28 - Add a build knob for _FORTIFY_SOURCE

Mon, 13 May 2024 05:23:50 +0000

b461276d75488fe50c1503db85d43cbb8c3c3067 - Update WITH_/WITHOUT_SSP descriptions

Wed, 30 Aug 2023 20:49:44 +0000

b2c76c41be32f904179efed29c0ca04d53f3996c - Remove $FreeBSD$: one-line nroff pattern

Wed, 16 Aug 2023 17:55:15 +0000

Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_SSP

9d178c925fb9acd88d2e5c5145d639b30b398c12 - Drop 'Set to' from most src.conf(5) knobs

Sat, 10 Apr 2021 02:23:03 +0000

042df2e2dadea9f43b62b79ed97534c0eecf1dad - Enable GCC stack protection (aka Propolice) for userland:

Wed, 25 Jun 2008 21:33:28 +0000

Enable GCC stack protection (aka Propolice) for userland:- It is opt-out for now so as to give it maximum testing, but it may be turned opt-in for stable branches depending on the consensus. You can turn it off with WITHOUT_SSP.- WITHOUT_SSP was previously used to disable the build of GNU libssp. It is harmless to steal the knob as SSP symbols have been provided by libc for a long time, GNU libssp should not have been much used.- SSP is disabled in a few corners such as system bootstrap programs (sys/boot), process bootstrap code (rtld, csu) and SSP symbols themselves.- It should be safe to use -fstack-protector-all to build world, however libc will be automatically downgraded to -fstack-protector because it breaks rtld otherwise.- This option is unavailable on ia64.Enable GCC stack protection (aka Propolice) for kernel:- It is opt-out for now so as to give it maximum testing.- Do not compile your kernel with -fstack-protector-all, it won't work.Submitted by: Jeremie Le Hen List of files: /src/tools/build/options/WITHOUT_SSP

36aa6a9be59ae191ea447fcc7f8675743e251a07 - Introduce WITHOUT_SSP option that allows users to exclude LGPLed

Sat, 19 May 2007 04:42:59 +0000

Introduce WITHOUT_SSP option that allows users to exclude LGPLedlibssp from the build. List of files: /src/tools/build/options/WITHOUT_SSP

07423969869c2034d1e70439ae5d70ddd390bf17 - src.conf.5: Update xref for SSP description

Thu, 23 Jan 2025 14:02:31 +0000

9bfd3b4076a7b0dfd27ab22318e5113dc84fea28 - Add a build knob for _FORTIFY_SOURCE

Mon, 13 May 2024 05:23:50 +0000

b461276d75488fe50c1503db85d43cbb8c3c3067 - Update WITH_/WITHOUT_SSP descriptions

Wed, 30 Aug 2023 20:49:44 +0000

b2c76c41be32f904179efed29c0ca04d53f3996c - Remove $FreeBSD$: one-line nroff pattern

Wed, 16 Aug 2023 17:55:15 +0000

Remove $FreeBSD$: one-line nroff patternRemove /^\.\\"\s*\$FreeBSD\$$\n/ List of files: /src/tools/build/options/WITHOUT_SSP

9d178c925fb9acd88d2e5c5145d639b30b398c12 - Drop 'Set to' from most src.conf(5) knobs

Sat, 10 Apr 2021 02:23:03 +0000

042df2e2dadea9f43b62b79ed97534c0eecf1dad - Enable GCC stack protection (aka Propolice) for userland:

Wed, 25 Jun 2008 21:33:28 +0000

36aa6a9be59ae191ea447fcc7f8675743e251a07 - Introduce WITHOUT_SSP option that allows users to exclude LGPLed

Sat, 19 May 2007 04:42:59 +0000

Introduce WITHOUT_SSP option that allows users to exclude LGPLedlibssp from the build. List of files: /src/tools/build/options/WITHOUT_SSP

042df2e2dadea9f43b62b79ed97534c0eecf1dad - Enable GCC stack protection (aka Propolice) for userland:

Wed, 25 Jun 2008 21:33:28 +0000