hardened-cc(1) [debian man page]

HARDENED-CC(1)							 Debian GNU/Linux						    HARDENED-CC(1)

NAME

       hardened-cc - gcc wrapper to enforce hardening toolchain improvements

SYNOPSIS

       export DEB_BUILD_HARDENING=1

       gcc ...

DESCRIPTION

       The  hardened-cc  wrapper  is  normally	used by calling gcc as usual when DEB_BUILD_HARDENING is set to 1. It will configure the necessary
       toolchain hardening features. By default, all features are enabled. If a given feature does not work correctly and needs  to  be  disabled,
       the corresponding environment variables mentioned below can be set to 0.

ENVIRONMENT

       DEB_BUILD_HARDENING=1
	      Enable hardening features.

       DEB_BUILD_HARDENING_DEBUG=1
	      Print the full resulting gcc command line to STDERR before calling gcc.

       DEB_BUILD_HARDENING_STACKPROTECTOR=0
	      Disable stack overflow protection. See README.Debian for details.

       DEB_BUILD_HARDENING_RELRO=0
	      Disable read-only linker sections. See README.Debian for details.

       DEB_BUILD_HARDENING_FORTIFY=0
	      Don't fortify several standard functions. See README.Debian for details.

       DEB_BUILD_HARDENING_PIE=0
	      Don't build position independent executables. See README.Debian for details.

       DEB_BUILD_HARDENING_FORMAT=0
	      Disable unsafe format string usage errors. See README.Debian for details.

NOTES

       System-wide settings can be added to /etc/hardening-wrapper.conf, one per line.

       The  real gcc symlinks are renamed gcc.real, and a diversion is registered with dpkg-divert(1).	Thus hardened-cc's idea of the default gcc
       is dictated by whatever package installed /usr/bin/gcc.

SEE ALSO

       hardened-ld(1) gcc(1)

Debian Project							    2008-01-08							    HARDENED-CC(1)

cxref-cpp(1)						      General Commands Manual						      cxref-cpp(1)

NAME

       cxref-cpp - A modified C preprocessor to use with cxref.

SYNOPSIS

       cxref-cpp ...

DESCRIPTION

       To  improve  the  output  that  is available for the source code for cross-referencing a modified version of the GNU CPP v2.7.2 is supplied
       (named cxref-cpp).

       This modified C preprocessor allows for a finer control over some features of the preprocessing that are not important for a compiler.	In
       a  standard  preprocessor, the preprocessor directives are intended for use only by the preprocessor, so passing the information through is
       not important.

       With cxref-cpp, there are some features that are different to the standard GNU CPP:

	      Compared to gcc versions earlier than version 2.8.0 there is an extra option that will output the #include  lines  from  the  source
	      file.  In version 2.8.0 and later this option is present.

	      Comments	trailing  a  #include  or  a  #define are not preserved by all versions of gcc even if the -C option is used.  This is not
	      important while compiling, but is useful for documenting.

	      The cxref-cpp program will take on the personality of the installed version of gcc so that the gcc header files can be parsed.  This
	      means  that it includes the same default include directory paths and macro definitions.  The file that contains these definitions is
	      called cxref-cpp.defines and is installed by the cxref-cpp-configure program or specified by  the  -cxref-cpp-defines  command  line
	      option.

OPTIONS

       The same as for gcc, apart from '-cxref-cpp-defines' described above.

SEE ALSO

       cxref(1), cxref-cpp-configure(1), gcc(1)

								    May 9, 2004 						      cxref-cpp(1)