I am having a problem emerging 2.3.5-r1 on my hardened boxes (although 2.3.5 compiled fine on these boxes). make[2]: *** [/var/tmp/portage/glibc-2.3.5-r1/work/build-default-i686-pc-linux-gnu-linuxthreads/csu/ssp.o] Error 1 make[2]: *** Waiting for unfinished jobs.... ../sysdeps/generic/libc-start.c: In function `__libc_start_main': ../sysdeps/generic/libc-start.c:192: warning: implicit declaration of function `__guard_setup' ../sysdeps/generic/libc-start.c:97: warning: unused variable `ubp_ev' make[2]: Leaving directory `/var/tmp/portage/glibc-2.3.5-r1/work/glibc-2.3.5/csu' make[1]: *** [csu/subdir_lib] Error 2 make[1]: Leaving directory `/var/tmp/portage/glibc-2.3.5-r1/work/glibc-2.3.5' make: *** [all] Error 2 !!! ERROR: sys-libs/glibc-2.3.5-r1 failed. !!! Function toolchain-glibc_src_compile, Line 226, Exitcode 2 !!! (no error message) !!! If you need support, post the topmost build error, NOT this status message. My flags are as follows: [ebuild U ] sys-libs/glibc-2.3.5-r1 [2.3.5] -build -erandom -glibc-compat20 -glibc-omitfp +hardened -linuxthreads-tls -multilib +nls +nptl -nptlonly +pic +profile (-selinux) +userlocales 0 kB And GCC: gcc version 3.4.4 (Gentoo Hardened 3.4.4, ssp-3.4.4-1.0, pie-8.7.8) Reproducible: Always Steps to Reproduce: emerge glibc Actual Results: See make error above in details. Expected Results: Emerge successfully. Here is my full emerge info: Portage 2.0.51.22-r2 (hardened/x86/2.6, gcc-3.4.4, glibc-2.3.5-r0, 2.6.11-hardened-r14 i686) ================================================================= System uname: 2.6.11-hardened-r14 i686 Intel(R) Xeon(TM) CPU 3.20GHz Gentoo Base System version 1.6.13 ccache version 2.4 [enabled] dev-lang/python: 2.3.5, 2.4.1-r1 sys-apps/sandbox: 1.2.11 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=pentium4 -pipe -fomit-frame-pointer -fstack-protector-all" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O2 -march=pentium4 -pipe -fomit-frame-pointer -fstack-protector-all" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://mirror.espri.arizona.edu/gentoo/ http://mirror.usu.edu/mirrors/gentoo/ http://mirror.datapipe.net/gentoo http://mirror.datapipe.net/gentoo http://gentoo.chem.wisc.edu/gentoo/" LDFLAGS="-Wl,-O1" MAKEOPTS="-j5" PKGDIR="/usr/portage//packages/x86/" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="acl acpi apache apache1 bash-completion cdr crypt cups dlloader doc dvd dvr fastcgi foomaticdb gd gdbm gmp hal hardened imap innodb ithreads javascript jpeg libwww maildir mmx mysql mysqli ncurses nls no-suexec nptl pam pcre perl php pic png posix profile readline reiserfs sasl session sockets spell spl sse ssl tcpd tokenizer truetype unicode usb userlocales utf8 vhosts x86 xfs xml xml2 zlib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LINGUAS, PORTDIR_OVERLAY
Excactly the same here. (same error messages). emerge info: Portage 2.0.51.22-r1 (hardened/x86/2.6, gcc-3.4.4, glibc-2.3.5-r0, 2.6.11-hardened-r15 i686) ================================================================= System uname: 2.6.11-hardened-r15 i686 Intel(R) Pentium(R) M processor 1400MHz Gentoo Base System version 1.6.13 distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.4 [enabled] dev-lang/python: 2.3.5, 2.4.1-r1 sys-apps/sandbox: 1.2.10 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium-m -O2 -pipe -fomit-frame-pointer -fstack-protector-all" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config /usr/kde/3.3/shutdown /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=pentium-m -O2 -pipe -fomit-frame-pointer -fstack-protector-all" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks sandbox sfperms strict userpriv usersandbox" GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ ftp:///ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/" LANG="de_DE" LC_ALL="de_DE@euro" LINGUAS="de" MAKEOPTS="-j4" PKGDIR="/usr/portage//packages/x86/" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="X a52 aalib acpi alsa apache2 arts avi bash-completion berkdb bitmap-fonts bluetooth cdr crypt cups curl dga directfb divx4linux dlloader dvd dvdr eds esd ethereal evo fam fbcon flac freetype ftp gd gdbm gif gimpprint gnokii gphoto2 gpm gps gtk gtk2 gtkhtml hardened hbci icq imagemagick imap imlib irda java javascript jpeg kde ldap mad maildir mikmod mmx monkey motif moznocompose moznoirc moznomail mozp3p mozsvg mplayer mysql ncurses nls nptl nptlonly ntlm ogg opengl pam pcmcia perl pic png posix python qt radeon readline real rtc samba sdl slang sms sse sse2 ssl svga tcltk tcpd tiff truetype truetype-fonts type1-fonts usb userlocales vcd vorbis wifi win32codecs x86 xine xinerama xml xml2 xmms xv xvid zlib linguas_de userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LDFLAGS
Can you please paste the whole error? There's more above that line that we need to see.
Actually, I noticed this error further up in the output: ../sysdeps/unix/sysv/linux/ssp.c:24:3: #error ssp.c has to be built w/ -fno-stack-protector
James, Daniel - remove '-fstack-protector-all' from your CFLAGS. Setting '-fstack-protector' or '-fstack-protector-all' will break things since it is not always sensible to set it for all objects. If you want to have the stack protector, just let hardened gcc do its thing; it'll switch on the stack-protector in most cases, avoiding a few situations where it causes problems. If you want to check your compiler switches ssp on by default, do: echo | gcc -dM -E - | grep SSP and you should see: #define __SSP__ 1 #define __SSP_ALL__ 2 If you don't, re-emerge gcc and try again.
