Re: [gentoo-hardened] Disabling SSP for one package

2013-12-17 Thread Michael Orlitzky
On 12/17/2013 08:57 AM, Alex Xu wrote: > > Can't you do CFLAGS=-fno-stack-protector in p.env? > Yep, thanks. I had to prepend $CFLAGS to it, i.e., CFLAGS="${CFLAGS} -fno-stack-protector" but no crash after a recompile.

Re: [gentoo-hardened] Disabling SSP for one package

2013-12-17 Thread Alex Xu
On 17/12/13 08:44 AM, Michael Orlitzky wrote: > I'm hitting a nasty bug with SSP/PHP: > > https://bugs.gentoo.org/show_bug.cgi?id=491100 > > Recompiling PHP with hardenednossp fixes the problem, but on this one > server we're recompiling PHP a lot (as we figure out which extensions > are needed

[gentoo-hardened] Disabling SSP for one package

2013-12-17 Thread Michael Orlitzky
I'm hitting a nasty bug with SSP/PHP: https://bugs.gentoo.org/show_bug.cgi?id=491100 Recompiling PHP with hardenednossp fixes the problem, but on this one server we're recompiling PHP a lot (as we figure out which extensions are needed to migrate a bunch of classic ASP sites). Supposing I'm ve