Changeset bed3894

Timestamp:

01/31/2024 09:43:03 AM (4 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.1, 12.1-rc1, multilib, trunk, xry111/arm64, xry111/clfs-ng, xry111/loongarch, xry111/loongarch-12.1, xry111/mips64el, xry111/update-glibc

Children:

cdf280e

Parents:

bbcac38

git-author:

Xi Ruoyao <xry111@…> (01/31/2024 09:35:03 AM)

git-committer:

Xi Ruoyao <xry111@…> (01/31/2024 09:43:03 AM)

Message:

glibc: Add more rationale about --enable-stack-protector, and remove the stale explanation of --with-headers

File:

• chapter08/glibc.xml (modified) (1 diff)

chapter08/glibc.xml

@@ -103 +103 @@
           <para>This option increases system security by adding
           extra code to check for buffer overflows, such as stack
-          smashing attacks.</para>
-        </listitem>
-      </varlistentry>
-<!-- do we need this one? -->
-      <varlistentry>
-        <term><parameter>--with-headers=/usr/include</parameter></term>
-        <listitem>
-          <para>This option tells the build system where to find the
-          kernel API headers.</para>
+          smashing attacks.  Note that Glibc always explicitly overrides
+          the default of GCC, so this option is still needed even though
+          we've already specified <option>--enable-default-ssp</option> for
+          GCC.</para>
         </listitem>
       </varlistentry>