|
From: Boursin O. <oli...@in...> - 2017-09-28 20:21:26
|
Hello, I discover that compilation options were not the same between version 1.6.9 and 1.8.0 : Using a tool like checksec (https://github.com/slimm609/checksec.sh), 1.6.9 option "proc-all" told me that processes were all Full RELRO, Stack Canaries, Pax enabled, PIE enabled and Fortify (see joined pictures). With version 1.8.0, it seems that only some processes have those hardening mechanism (example sshd). Is there any reason of that ? I know it is possible to build a customized version of Devil-Linux, but I have not found where to put customized gcc parameters, so any advices are welcome. Many thanks, OB |