From 1bade3f439265d1c964701316922ab5cbfed93c8 Mon Sep 17 00:00:00 2001 From: Pierre Labastie Date: Sat, 10 Sep 2022 13:41:38 +0200 Subject: Document the --enable-default-pie/ssp options Also document test failures in gcc chapter 8 --- chapter05/gcc-pass1.xml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'chapter05/gcc-pass1.xml') diff --git a/chapter05/gcc-pass1.xml b/chapter05/gcc-pass1.xml index 0b7f17913..2c8fc4c31 100644 --- a/chapter05/gcc-pass1.xml +++ b/chapter05/gcc-pass1.xml @@ -134,6 +134,20 @@ cd build + + --enable-default-pie and + --enable-default-ssp + + Those switches allow GCC to compile programs with + some hardening security features (more information on those in + the in chapter 8). They are not + strictly needed at this stage, since the compiler will only produce + temporary executables. But it is cleaner to have the temporary + packages be as close as possible to the final ones. + + + + --disable-shared -- cgit v1.2.3-54-g00ecf