[ubuntu-hardened] [16.04 LTS] Why Linux kernel is compiled using "-fstack-protector-all" option, instead of previously used "strong" variant?

Seth Arnold seth.arnold at canonical.com
Fri Sep 22 19:31:13 UTC 2017


On Fri, Sep 22, 2017 at 11:16:28AM -0700, Steve Beattie wrote:
> This is actually an interesting question.

I'll say, this is far more involved than I expected!

> Note that +V=1 at the end, the buildd environment has apparently
> changed/updated to set that variable. We can see that the launchpad
> build environments differed in the builds:

Here's an email announcing the change of builder environment variables:
https://lists.ubuntu.com/archives/ubuntu-devel-announce/2017-September/001225.html

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20170922/f75a57b1/attachment.sig>


More information about the ubuntu-hardened mailing list