Unfortunately for internet facing applications we use -fstack-protector-strong, so I modified my bsd.port.mk to accommodate. Perhaps you would consider the same. My change is basically, add one line & change one line: --- /usr/ports/Mk/bsd.ssp.mk (revision 453385) +++ /usr/ports/Mk/bsd.ssp.mk (working copy) @@ -7,8 +7,9 @@ (${ARCH} == i386 || ${ARCH} == amd64) # Overridable as a user may want to use -fstack-protector-all SSP_CFLAGS?= -fstack-protector +SSP_LDFLAGS?= -fstack-protector CFLAGS+= ${SSP_CFLAGS} -LDFLAGS+= -fstack-protector +LDFLAGS+= ${SSP_LDFLAGS} # -lssp_nonshared is needed on i386 where /usr/lib/libc.so is not an ldscript # This is currently unused XXX . if defined(SSP_NEED_NONSHARED) And air gap machines SSP_CFLAGS= -fno-stack-protector SSP_LDFLAGS= -fno-stack-protector
(In reply to dewayne from comment #0) Apologies I was working on a few different things as I wrote the original PR, I modified bsd.ssp.mk not bsd.port.mk for the additional SSP_LDFLAGS statement.
see https://svnweb.freebsd.org/ports?view=revision&revision=499897