On 11/25/2013 02:14 PM, Kees Cook wrote: > Build the kernel with -fstack-protector-strong when it is available > (gcc 4.9 and later). This increases the coverage of the stack protector > without the heavy performance hit of -fstack-protector-all. What is the difference between the various options? -hpa