Compiler hardening In Ubuntu and Debian

http://www.outflux.net/blog/archives/2014/02/03/compiler-hardening-in-ubuntu-and-debian/

Interesting figures. They show that Debian hasn't implemented several security features as thoroughly as Ubuntu has although they are slowly catching up. BTW, that's also true for, e.g., AppArmor.

Are there comparable security features overviews for other distros?

EDIT: The author is Kees Cook.

 

Thanks for posting.

In the article where it says "On Ubuntu, when you do that “./configure && make” you’ll get the features automatically.", indicates that Ubuntu uses what appears to be the standard Gnu/Linux Makefile approach, and if Debian all along had not been following that approach to differentiate themselves then perhaps that was a poor decision on their part previously, or that the left out the security hardening features initially at some point. At any rate, it's good to see them improving in that area.

-- Tom