This is an auto-filled bug because this package does not respect user's CFLAGS. While SSP is really good for security purpose, I'd expect that with CFLAGS="-fno-stack-protector" the package should not have stack protection. In this case the file /usr/sbin/ntpd (and maybe some other file from this package) has stack protection. To check the SSP status you can use: checksec --file /usr/sbin/ntpd The same issue happens for relro and pie.
I'm sorry but the stack-protection issue was a false positive. Anyway the bug is present for RELRO and pie. PIE, in other packages is managed by a useflag (see ssh and pam)
At least this one appears fixed in 1.2.0, which I'm about to push.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3e5dc88331ebe51f7b98a4aaca17657b7e914d63 commit 3e5dc88331ebe51f7b98a4aaca17657b7e914d63 Author: Sam James <sam@gentoo.org> AuthorDate: 2022-12-30 06:29:54 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-12-30 06:32:19 +0000 net-misc/ntpsec: add 1.2.2 Closes: https://bugs.gentoo.org/679510 Closes: https://bugs.gentoo.org/753854 Closes: https://bugs.gentoo.org/806037 Closes: https://bugs.gentoo.org/839597 Closes: https://bugs.gentoo.org/885879 Signed-off-by: Sam James <sam@gentoo.org> net-misc/ntpsec/Manifest | 1 + net-misc/ntpsec/ntpsec-1.2.2.ebuild | 163 ++++++++++++++++++++++++++++++++++++ net-misc/ntpsec/ntpsec-9999.ebuild | 3 +- 3 files changed, 165 insertions(+), 2 deletions(-)
