freebsd security - Feb 2004 - using libparanoia

Hi there,

I was looking for stack smashing protection under freebsd,
so i found libparanoia (/usr/ports/security/libparanoia), i had only one
question using the normal 'make install' (so no copy-to-libc).

If i add in /ert/make.conf:
CFLAGS= -O -pipe -lparanoia -L/usr/local/lib
COPTFLAGS= -O -pipe -lparanoia -L/usr/local/lib

Will EVERYTHING build from that time (including kernel/userland/ports),
be protected by libparanoia? if not, what will be?

Because when using copy-to-libc i guess i have to reinstall the port every
time i cvsup src-all + i do not build ports on any production server and
'make package' does not include the copy-to-libc procedure.

Greetz,


Jimmy Scott

"Jimmy Scott" <admin@inet-solutions.be>
writes:
> If i add in /ert/make.conf:
> CFLAGS= -O -pipe -lparanoia -L/usr/local/lib
> COPTFLAGS= -O -pipe -lparanoia -L/usr/local/lib
>
> Will EVERYTHING build from that time (including kernel/userland/ports),
> be protected by libparanoia? if not, what will be?
nothing.  if you put -lparanoia in CFLAGS it will be too early on the
command line to have any effect.

DES
-- 
Dag-Erling Sm?rgrav - des@des.no