You're right, I didn't do any research to back up that claim. I just assumed
it was included since Gentoo had it but in fact they just include the patch.
As previously mentioned, you can get it here if you're interested:
http://www.trl.ibm.com/projects/security/ssp/

And as also mentioned before, Grsecurity complements this protection well to
build a very secure server environment. I highly recommend it.

On Thursday 14 August 2003 01:36 pm, you wrote:
> On RedHat 9, gcc version 3.2.2 20030222, it is not included.
>
> [brian@WashingMachine brian]$ gcc -fstack-protector -o testfile
> testfile.c
> cc1: unrecognized option `-fstack-protector'
>
> -----Original Message-----
> From: Patrick Dolan [mailto:dolan (at) cc.admin.unt (dot) edu [email concealed]]
> Sent: Wednesday, August 13, 2003 6:31 PM
> To: Lance James
> Subject: Re: Buffer overflow prevention
>
>
> Yes, it should be in all distributions of GCC. I use it on a Gentoo
> Linux server of mine. The version is 3.2.3, just FYI.
>
> ----- Original Message -----
> From: "Lance James" <lance.james (at) bakbone (dot) com [email concealed]>
> To: <dolan (at) cc.admin.unt (dot) edu [email concealed]>; "'Eygene A. Ryabinkin'"
> <rea (at) rea.mbslab.kiae (dot) ru [email concealed]>
> Cc: <bugtraq (at) securityfocus (dot) com [email concealed]>
> Sent: Wednesday, August 13, 2003 6:21 PM
> Subject: RE: Buffer overflow prevention
>
> > Is that in universal gcc, or OpenBSD only?
> >
> > Lance James
> >
> > -----Original Message-----
> > From: Patrick Dolan [mailto:dolan (at) cc.admin.unt (dot) edu [email concealed]]
> > Sent: Wednesday, August 13, 2003 10:20 AM
> > To: Eygene A. Ryabinkin
> > Subject: Re: Buffer overflow prevention
> >
> > There is a flag for the Gnu C/C++ compilers, -fstack-protector, that
> > will implement ProPolice stack protection. It should prevent stack
> > smashing techniques.
> >

--
Patrick Dolan
UNT Information Security

PGP ID: E5571154
Primary key fingerprint: 5681 25E4 6BE6 298E 9CF0 6F8D B13B 2456 E557 1154

[ reply ]