Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cc-wrapper: add support for shadowstack hardening flag #326819

Merged
merged 9 commits into from
Jul 28, 2024
Merged

cc-wrapper: add support for shadowstack hardening flag #326819

merged 9 commits into from
Jul 28, 2024

Commits on Jul 14, 2024

  1. bootstrap-tools-musl: match bootstrap-tools hardeningUnsupportedFlags 

    seems we missed adding stackclashprotection
    @risicle
    risicle committed Jul 14, 2024
    Configuration menu
    Copy the full SHA
    c68739f View commit details
    Browse the repository at this point in the history

  2. cc-wrapper: add support for shadowstack hardening flag

    @risicle
    risicle committed Jul 14, 2024
    Configuration menu
    Copy the full SHA
    b207b6e View commit details
    Browse the repository at this point in the history

  3. glibc: add option enableCETRuntimeDefault to runtime-enable CET by de… 

    …fault

this appears to have been added to glibc because of the number
of packages in some distributions that were built with CET enabled
before a CET enabled machine was available to test for breakage
with.

we don't have that problem to such an extent and users of hardened
systems will likely want to enable this by default.
    @risicle
    risicle committed Jul 14, 2024
    Configuration menu
    Copy the full SHA
    3ebc7bb View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2024

  1. glibc: enableCETRuntimeDefault for pkgsExtraHardening

    @risicle
    risicle committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    41cae89 View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2024

  1. doc/stdenv: add section on shadowstack hardening flag

    @risicle
    risicle committed Jul 28, 2024
    Configuration menu
    Copy the full SHA
    5ce990e View commit details
    Browse the repository at this point in the history

  2. pcre: expose enableJit argument, disable shadowstack when enabled

    @risicle
    risicle committed Jul 28, 2024
    Configuration menu
    Copy the full SHA
    a30f794 View commit details
    Browse the repository at this point in the history

  3. llvm: disable shadowstack hardening flag

    @risicle
    risicle committed Jul 28, 2024
    Configuration menu
    Copy the full SHA
    7a4736e View commit details
    Browse the repository at this point in the history

  4. lix: disable shadowstack hardening flag

    @risicle
    risicle committed Jul 28, 2024
    Configuration menu
    Copy the full SHA
    b84da12 View commit details
    Browse the repository at this point in the history

  5. nix: disable shadowstack hardening flag

    @risicle
    risicle committed Jul 28, 2024
    Configuration menu
    Copy the full SHA
    0dacfda View commit details
    Browse the repository at this point in the history