glibc: Add more rationale about --enable-stack-protector, and remove the stale explanation of --with-headers

This commit is contained in:
Xi Ruoyao 2024-01-31 17:35:03 +08:00
parent bbcac389a3
commit bed3894b89
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3

View File

@ -102,15 +102,10 @@ cd build</userinput></screen>
<listitem>
<para>This option increases system security by adding
extra code to check for buffer overflows, such as stack
smashing attacks.</para>
</listitem>
</varlistentry>
<!-- do we need this one? -->
<varlistentry>
<term><parameter>--with-headers=/usr/include</parameter></term>
<listitem>
<para>This option tells the build system where to find the
kernel API headers.</para>
smashing attacks. Note that Glibc always explicitly overrides
the default of GCC, so this option is still needed even though
we've already specified <option>--enable-default-ssp</option> for
GCC.</para>
</listitem>
</varlistentry>