From nobody Tue Jul 23 22:21:05 2024 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WTBSK6ZK3z5R2pK; Tue, 23 Jul 2024 22:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WTBSK625Vz4YJr; Tue, 23 Jul 2024 22:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1721773265; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=yXIMzGZpRhnbzUbAprCvFbcKLxGx8vQuaZoubtYxwp4=; b=mAZHhkHM2FBQF+uaFzKCTUZOrlNk1q55yl9YF6m649dwflp+pmu48aHbzi+NwPpYJxZFgW iDpw8RfK24TxmHmtVHz1Eh9cRmzP3/FlhIil3V5+aYIqhTIlSiUdy0+STD8FE4qH+wYGme zvFVz2BgQT9JBOXwA3DeJlFC8fCdPV7Wkh7Cno0FAepj9bVU0aFdRxxzaHlmtPrasCcrZS fSxmvTlRnVKBHX+cCfMBpvtw9eeAk5PUtsd+taMLU6WNr6cyc2uH8hRq0s1U8V6ONHlvxW TMEq/PUAPLOJy044VjhF6rK16MVv/hpJNlWGqMqxLbAUiLWhDsEdPbvkJUj4NQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1721773265; a=rsa-sha256; cv=none; b=cX51qaI4M5H+qZ+BjZ8i63EPu+vV/ElJP+NLZuuqUIOBHBYPh9eatVzWsbjjs0ISKN4dXi osCOW5xH88Neig/2LyKT8PPHoZB/DAvtzd6CbIHXQr+sLLATzJ5KTq548GssXgVwP9b+Az GbV3VHOv08PPAuYuvqsf/uvitNYQrM13CcZEOUmZ3l11jv8K/ycJEGCKRamAiTRzJatgsj E1hE9ZkJfvmiML0uw/ZjGSVeF4YVCAVIU6MHaba2QTtGB/kmIZ6+MIYZMJ6umDv//ito3L dmC2QfroiPiXYciVZLwFfM9GMWpavMygICF94J3k5pJCPKtjMjpdh09wGfpyRA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1721773265; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=yXIMzGZpRhnbzUbAprCvFbcKLxGx8vQuaZoubtYxwp4=; b=GSJ/S6PHsTqZpgBOPnXLE2yDZYOyFdQFx1WkGTu+284E4igqvvQ8tXE7ioVSVDcnzFmLt0 wqx4GMtLpJdbKJsL+QBRBBi4y/ZRCBj81jHB7G9LvHnJLb8KRgJMp/HuETYD6UhxWJnu9X +CUbT5UTsJVyN8Fdx3hYRu0YDewJtjKo2xCHFclq97e2J5I9k76Srv4FsT3jhEvKRIzkvo PVqaBL/S/iXYkq4R354rpclmm1NOFrX5dUjHLZRj5qyCx24WwY5VoQapoUSHQkk9axxRYW siehmTtAmMqzOaAzF6R3/IPJqUTsckulkNbLX2OnRHEsDodPpG1MHuGGFMDjWw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4WTBSK5dNLzmh6; Tue, 23 Jul 2024 22:21:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 46NML5NQ034583; Tue, 23 Jul 2024 22:21:05 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 46NML59Y034580; Tue, 23 Jul 2024 22:21:05 GMT (envelope-from git) Date: Tue, 23 Jul 2024 22:21:05 GMT Message-Id: <202407232221.46NML59Y034580@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kyle Evans Subject: git: 8f77be22904a - main - mitigations(7): note that FORTIFY_SOURCE must be set in the env List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kevans X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 8f77be22904a91014bb14af30c7d88a5d31f2c51 Auto-Submitted: auto-generated The branch main has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=8f77be22904a91014bb14af30c7d88a5d31f2c51 commit 8f77be22904a91014bb14af30c7d88a5d31f2c51 Author: Kyle Evans AuthorDate: 2024-07-23 22:20:53 +0000 Commit: Kyle Evans CommitDate: 2024-07-23 22:20:53 +0000 mitigations(7): note that FORTIFY_SOURCE must be set in the env Some parts of the build will need to be able to override it, so it must be set either in the environment or src-env.conf -- NOT src.conf. Reviewed by: imp, markj Sponsored by: Klara, Inc. Sponsored by: Stormshield Differential Revision: https://reviews.freebsd.org/D46070 --- share/man/man7/mitigations.7 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/share/man/man7/mitigations.7 b/share/man/man7/mitigations.7 index e5ff439455e3..75decbe2d026 100644 --- a/share/man/man7/mitigations.7 +++ b/share/man/man7/mitigations.7 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd June 1, 2024 +.Dd July 23, 2024 .Dt MITIGATIONS 7 .Os .Sh NAME @@ -275,6 +275,8 @@ headers. .Fx world builds can set .Va FORTIFY_SOURCE +in the environment or +.Pa /etc/src-env.conf to provide a default value for .Va _FORTIFY_SOURCE . When enabled,