DebianSecurity

From DcSharedWiki

Revision as of 06:20, 22 April 2019 by Duck (talk | contribs) (3 revisions imported)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Some features enabled in Ubuntu and not in Debian:

gcc's -fstack-protector
- http://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_STACKPROTECTOR_.28gcc.2BAC8-g.2B-.2B-_-fstack-protector_--param_ssp-buffer-size.3D4.29
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469517 -fstack-protector produces segfaulting binaries on arm/armel
PIE
- http://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_PIE_.28gcc.2BAC8-g.2B-.2B-_-fPIE_-pie.29
build with "-D_FORTIFY_SOURCE=2"
- http://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_FORTIFY_.28gcc.2BAC8-g.2B-.2B-_-D_FORTIFY_SOURCE.3D2.29
RELRO
- http://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_RELRO_.28ld_-z_relro.29
AppArmor profiles

Work in progress:

Ubuntu:

Retrieved from "https://wiki.duckcorp.org//index.php?title=DebianSecurity&oldid=12"