From fb84603f8c45fdafdaa750490785fc1b15541386 Mon Sep 17 00:00:00 2001 From: Eric Andersen Date: Fri, 2 Jan 2004 23:34:13 +0000 Subject: Peter S. Mazinger writes: Hello Erik! I have made some cosmetical changes to the files, removed the added SCRT=-fPIC option from building the crt0.S file (but it is a requirement to build them with -fPIC), and changed some comments. I have left the ldso.c patch with PIE_SUPPORT ifdefs, but consider applying it w/o them (see some earlier comment from PaX Team on this issue, as it is considered a bug). To have it work correctly, you'll also need removing COMPLETELY_PIC. One thing is missing: PIE_SUPPORT should be usable only for i386 (for now). Also added the support for propolice protection (that works for me and catches memcpy/strcpy attacks (but needs a special gcc version). Thanks, Peter --- debian/config | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'debian') diff --git a/debian/config b/debian/config index 487198a72..1177443ec 100644 --- a/debian/config +++ b/debian/config @@ -36,11 +36,16 @@ HAVE_DOT_CONFIG=y # # HAVE_NO_PIC is not set DOPIC=y +# HAVE_NO_SHARED is not set HAVE_SHARED=y +# ARCH_HAS_NO_LDSO is not set BUILD_UCLIBC_LDSO=y +# UCLIBC_PIE_SUPPORT is not set LDSO_LDD_SUPPORT=y UCLIBC_CTOR_DTOR=y +# UCLIBC_PROPOLICE is not set # UCLIBC_PROFILING is not set +# HAS_NO_THREADS is not set UCLIBC_HAS_THREADS=y PTHREADS_DEBUG_SUPPORT=y UCLIBC_HAS_LFS=y -- cgit v1.2.3