You're right, I didn't do any research to back up that claim. I just assumed it was included since Gentoo had it but in fact they just include the patch. As previously mentioned, you can get it here if you're interested: http://www.trl.ibm.com/projects/security/ssp/ And as also mentioned before, Grsecurity complements this protection well to build a very secure server environment. I highly recommend it. On Thursday 14 August 2003 01:36 pm, you wrote: > On RedHat 9, gcc version 3.2.2 20030222, it is not included. > > [brian@WashingMachine brian]$ gcc -fstack-protector -o testfile > testfile.c > cc1: unrecognized option `-fstack-protector' > > -----Original Message----- > From: Patrick Dolan [mailto:dolan@cc.admin.unt.edu] > Sent: Wednesday, August 13, 2003 6:31 PM > To: Lance James > Subject: Re: Buffer overflow prevention > > > Yes, it should be in all distributions of GCC. I use it on a Gentoo > Linux server of mine. The version is 3.2.3, just FYI. > > ----- Original Message ----- > From: "Lance James" <lance.james@bakbone.com> > To: <dolan@cc.admin.unt.edu>; "'Eygene A. Ryabinkin'" > <rea@rea.mbslab.kiae.ru> > Cc: <bugtraq@securityfocus.com> > Sent: Wednesday, August 13, 2003 6:21 PM > Subject: RE: Buffer overflow prevention > > > Is that in universal gcc, or OpenBSD only? > > > > Lance James > > > > -----Original Message----- > > From: Patrick Dolan [mailto:dolan@cc.admin.unt.edu] > > Sent: Wednesday, August 13, 2003 10:20 AM > > To: Eygene A. Ryabinkin > > Subject: Re: Buffer overflow prevention > > > > There is a flag for the Gnu C/C++ compilers, -fstack-protector, that > > will implement ProPolice stack protection. It should prevent stack > > smashing techniques. > > -- Patrick Dolan UNT Information Security PGP ID: E5571154 Primary key fingerprint: 5681 25E4 6BE6 298E 9CF0 6F8D B13B 2456 E557 1154
