Changeset 08c7ccd

Timestamp:

09/10/2022 12:32:49 PM (20 months ago)

Author:

Pierre Labastie <pierre.labastie@…>

Branches:

11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/soup3, xry111/xf86-video-removal

Children:

706265a

Parents:

b89180f

Message:

Fix alphabetical order in glossary

Files:

• appendices/glossary.xml (modified) (2 diffs)
• general/prog/llvm.xml (modified) (3 diffs)

appendices/glossary.xml

@@ -2312 +2312 @@
     </glossentry>
 
+    <glossentry id="gSSL">
+      <glossterm>
+        <acronym>SSL</acronym>
+      </glossterm>
+      <glossdef>
+        <para>
+          Secure Sockets Layer
+        </para>
+      </glossdef>
+    </glossentry>
+
     <glossentry id="gSSP">
       <glossterm>
@@ -2323 +2334 @@
     </glossentry>
 
-    <glossentry id="gSSL">
-      <glossterm>
-        <acronym>SSL</acronym>
-      </glossterm>
-      <glossdef>
-        <para>
-          Secure Sockets Layer
-        </para>
-      </glossdef>
-    </glossentry>
-
     <glossentry id="gSUID">
       <glossterm>

general/prog/llvm.xml

@@ -152 +152 @@
         <listitem>
           <para>
-            SSP patch:
+            Patch enabling <xref linkend="gSSP"/> by default in clang:
             <ulink url="&patch-root;/clang-&llvm-version;-enable_default_ssp-1.patch"/>
           </para>
@@ -236 +236 @@
      before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d projects/compiler-rt &lt;../compiler-rt-14.0.6-glibc_2_36-1.patch</userinput></screen>
+
+    <para>
+      If you have downloaded <application>clang</application>,
+      apply the following patch to enable <xref linkend="gSSP"/> by default
+      in compiled programs.
+    </para>
+<!-- need <../<patch> instead of -i because -d changes directory
+     before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d tools/clang &lt;../clang-&llvm-version;-enable_default_ssp-1.patch</userinput></screen>
 
@@ -391 +399 @@
       benchmarks. This option requires additional code that
       is not currently available.
+    </para>
+
+    <para>
+      <parameter>-DCLANG_DEFAULT_PIE_ON_LINUX=ON</parameter>: makes
+      <option>-fpie</option> option the default when compiling programs.
+      Together with the <xref linkend="gASLR"/> feature enabled in the kernel,
+      this defeats some kind of attacks based on known memory layouts.
     </para>