Announcement

Collapse
No announcement yet.

Fedora 31 Plans To Use GCC Security Hardening Flags By Default

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Fedora 31 Plans To Use GCC Security Hardening Flags By Default

    Phoronix: Fedora 31 Plans To Use GCC Security Hardening Flags By Default

    Fedora 31 will likely be enabling various GCC security hardening flags by default in trying to further enhance the security of the software in its repositories...

    http://www.phoronix.com/scan.php?pag...-GCC-Hardening

  • #2
    These GCC flags are already enabled by default in all package builds in Fedora. What this change is about is forcing these behaviors for regular developer usage of GCC too.

    Comment


    • #3
      "In fact, the flags they are planning to use by default are already the defaults on Ubuntu."

      And this is one more reason why Ubuntu continues to be the premiere Linux distribution, it is the distro that comes closest to "just works" without all the little "paper cuts" (I'm looking at you Manjaro) that make an otherwise great distro unusable,

      Comment


      • #4
        phoronix Instead of "-fstack-protector-string", you probably wanted to write "-fstack-protector-strong" - the same flag that Ubuntu builds all of its packages with.
        Pretty sure that GCC and Clang don't have "-fstack-protector-string".

        Comment


        • #5
          @King InuYasha
          Indeed, I was confused by the article, as I have quite a few packages that I maintain in Fedora, which were affected by the move. That happened quite a while ago.
          Last edited by Mystro256; 03-12-2019, 08:38 AM.

          Comment


          • #6
            Yay, more performance losses!

            Comment


            • #7
              Originally posted by Spooktra View Post
              "In fact, the flags they are planning to use by default are already the defaults on Ubuntu."

              And this is one more reason why Ubuntu continues to be the premiere Linux distribution, it is the distro that comes closest to "just works" without all the little "paper cuts" (I'm looking at you Manjaro) that make an otherwise great distro unusable,
              except with Flatpaks.

              Comment


              • #8
                Originally posted by Spooktra View Post
                "In fact, the flags they are planning to use by default are already the defaults on Ubuntu."

                And this is one more reason why Ubuntu continues to be the premiere Linux distribution, it is the distro that comes closest to "just works" without all the little "paper cuts" (I'm looking at you Manjaro) that make an otherwise great distro unusable,
                bla - https://fedoraproject.org/wiki/Chang...n_All_Packages

                for packages they are default for a long time and when you are doing "make install" instead write a rpm-spec it's your fault

                Comment


                • #9
                  Originally posted by birdie View Post
                  Yay, more performance losses!
                  bullshit - https://fedoraproject.org/wiki/Chang...n_All_Packages

                  i wonder why people with no clue always have opinions backed by nothing

                  Comment


                  • #10
                    Originally posted by hreindl View Post

                    bullshit - https://fedoraproject.org/wiki/Chang...n_All_Packages

                    i wonder why people with no clue always have opinions backed by nothing
                    Exactly nothing on this page pertains to performance or performance loss. A nice link!

                    Comment

                    Working...
                    X