Diff for /wikisrc/pkgsrc/hardening.mdwn between versions 1.23 and 1.24

version 1.23, 2017/11/05 23:54:11 version 1.24, 2017/11/06 00:04:07
Line 11  Mechanisms can be enabled individually i Line 11  Mechanisms can be enabled individually i
 individually described below.  They are sorted by whether thery are  individually described below.  They are sorted by whether thery are
 enabled by default, and then by their ordering in mk/defaults/mk.conf.  enabled by default, and then by their ordering in mk/defaults/mk.conf.
   
 For each, see the Caveats section below for an explanation of what  Typically, a feature will cause some programs to fail to build or work
 might go wrong at compile time and at run time, and how to notice and  when first enabled.  This can be due to latent problems in the
 address these problems.  program, and can be due to other reasons.  After enough testing to
   have confidence that user problems will be quite rare, individual
   mechanisms will be enabled by default.
   
   For each mechanism, see the Caveats section below for an explanation
   of what might go wrong at compile time and at run time, and how to
   notice and address these problems.
   
 ## Enabled by default in the stable branch  ## Enabled by default in the stable branch
   
Line 61  this means NetBSD 8 and later, i386 and  Line 67  this means NetBSD 8 and later, i386 and 
 This also makes the exploitation of some security vulnerabilities more  This also makes the exploitation of some security vulnerabilities more
 difficult in some cases.  difficult in some cases.
   
   TODO: Explain gcc vs clang, and whether this has broad support or just
   a few platforms.
   
   TODO: Address "partial" vs "full"; which is this?
   
   TODO: Give a link to a comprehensive explanation.
   
 ### PKGSRC_USE_STACK_CHECK  ### PKGSRC_USE_STACK_CHECK
   
 This uses `-fstack-check` with GCC for another stack protection  This uses `-fstack-check` with GCC for another stack protection

Removed from v.1.23  
changed lines
  Added in v.1.24


CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb