diff options
Diffstat (limited to 'chapter06/glibc.xml')
-rw-r--r-- | chapter06/glibc.xml | 13 |
1 files changed, 6 insertions, 7 deletions
diff --git a/chapter06/glibc.xml b/chapter06/glibc.xml index 8a40aee02..07cbe969d 100644 --- a/chapter06/glibc.xml +++ b/chapter06/glibc.xml @@ -50,7 +50,7 @@ Glibc autoconf tests would give false results and defeat the goal of achieving a clean build.</para></note> - <para>Some of the Glibc programs use non-FHS compilant + <para>Some of the Glibc programs use the non-FHS compilant <filename class="directory">/var/db</filename> directory to store their runtime data. Apply the following patch to make such programs store their runtime data in the FHS-compliant locations:</para> @@ -123,10 +123,9 @@ unset GCC_INCDIR</userinput></screen> <varlistentry> <term><parameter>--enable-stack-protector=strong</parameter></term> <listitem> - <para>This option increases system security by adding a known canary - (a random integer) to the stack during a function preamble, and checks - it when the function returns. If it changed, there was a stack - overflow, and the program aborts.</para> + <para>This option increases system security by adding + extra code to check for buffer overflows, such as stack + smashing attacks.</para> </listitem> </varlistentry> @@ -149,8 +148,8 @@ unset GCC_INCDIR</userinput></screen> Do not skip it under any circumstance.</para> </important> - <para>Generally a few tests do not pass, but you can generally ignore - any of the test failures listed below. Now test the build results:</para> + <para>Generally a few tests do not pass. The test failures listed below + are usually safe to ignore.</para> <screen><userinput remap="test">make check</userinput></screen> |