Comments (7)
mrybczyn
commented on July 17, 2024
Interested in this one
from wg-best-practices-os-developers.
gkunz
commented on July 17, 2024
Hi all,
we are actually very interested in picking this up and contributing to the document. I'll invite one of our security guys, who has worked on a similar document, to one of the next calls.
from wg-best-practices-os-developers.
gkunz
commented on July 17, 2024
Hi @SecurityCRob,
what do you think about putting this topic on the agenda for the next meeting? I'd like to bring a colleague who is interested in contributing content to the guide. He could walk us through some content we already have.
from wg-best-practices-os-developers.
SecurityCRob
commented on July 17, 2024
I LOVE the idea! I’ll get the next agenda setup tomorrow, feel free to add his discussion once it is ready!
Cheers,
CRob
Director of Security Communications
Intel Product Assurance and Security
From: Georg Kunz ***@***.***>
Sent: Thursday, January 26, 2023 9:04 AM
To: ossf/wg-best-practices-os-developers ***@***.***>
Cc: Robinson, Christopher ***@***.***>; Mention ***@***.***>
Subject: Re: [ossf/wg-best-practices-os-developers] Work on "Recommended compiler option flags for C/C++ programs" (Issue #97)
Hi @SecurityCRob<https://github.com/SecurityCRob>,
what do you think about putting this topic on the agenda for the next meeting? I'd like to bring a colleague who is interested in contributing content to the guide. He could walk us through some content we already have.
—
Reply to this email directly, view it on GitHub<#97 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AQRFDLCFCFTCUI33FWRB3IDWUJ733ANCNFSM6AAAAAARCWHOYU>.
You are receiving this because you were mentioned.Message ID: ***@***.******@***.***>>
from wg-best-practices-os-developers.
gkunz
commented on July 17, 2024
Great, thanks!
from wg-best-practices-os-developers.
thomasnyman
commented on July 17, 2024
I opened a draft PR ( #113 ) with the initial Markdown draft of the "Toolchain hardening for C and C++" guide discussed during the C/C++ Compiler Options BP Guide call on 2023-02-15 in order to make it available for review and feedback.
from wg-best-practices-os-developers.
david-a-wheeler
commented on July 17, 2024
All: The work contributed by Ericsson is far more complete, and thus is a better starting point. So I've changed the issue title.
This issue is now focused on taking our earlier work titled
"Compiler Options Hardening Guide for C and C++" and merge information that only it has into our current draft at https://github.com/ossf/wg-best-practices-os-developers/blob/main/docs/Compiler_Hardening_Guides/Compiler-Options-Hardening-Guide-for-C-and-C%2B%2B.md
from wg-best-practices-os-developers.
Related Issues (20)
- VOTE - Adopt WG Charter HOT 7
- Improve readme formatting HOT 3
- Fix linter errors in README.md
- Create a Vulnerabilities in Vendored Dependencies Guide HOT 2
- Distros' Default C/C++ Complier Options HOT 5
- VOTE: Create Memory Safety SIG under BEST Practices WG HOT 15
- Review "Best and Worst" compiler option flags for our C and C++ guidelines HOT 3
- Compiler Options Hardening Guide for C and C++, -z nodump
- Compiler Options: GCC 13.1 analyzer options HOT 6
- Compiler Hardening Guide: `-Wl,-z,noexecheap` command-line option HOT 3
- Compiler Options Hardening Guide for C and C++, -D_LIBCPP_ASSERT HOT 9
- Microsoft C/C++ compiler and linker options are not covered by the hardening guide HOT 2
- generic language vs contextual guidance HOT 2
- Add Azure DevOps to SCM Best Practices HOT 1
- Revamp publishing of guides such as concise guides & scm guide HOT 6
- Modify CSS of generated pages HOT 18
- Modify pages to use the best.openssf.org site, if we decide to switch to it HOT 6
- alternatives to `bp.openssf.org` HOT 12
- Rename Compiler_Hardening_Guides to Compiler-Hardening-Guides
- Compiler Hardening Guide: Missing Binutils version for `-rpath` and `--enable-new-dtags` HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wg-best-practices-os-developers.