Source strings

166 Strings 100%
Browse Translate
6,022 Words 100%
42,014 Characters 100%
This translation is being used as source strings within this component.

Strings status

Strings Words Characters
166 6,022 42,014
All strings Browse Translate Zen
166 6,022 42,014
Read-only strings Browse Translate Zen

Overview

Project website www.linuxfromscratch.org
Translation process
  • Translations can be made directly.
  • Translation suggestions can be made.
  • Any authenticated user can contribute.
  • The translation uses bilingual files.
Source code repository git@git.linuxfromscratch.org:fr-lfs
Repository branch 12.0
Last remote commit Add Portuguese (Brazil) BLFS 5a031b636f
Julien Lepiller authored 7 months ago
Last commit in Weblate Translated using Weblate (Portuguese (Brazil)) f64423a09b
User avatar jamenson authored 7 months ago
Weblate repository https://translate.linuxfromscratch.org/git/linux-from-scratch-12-0/index/
File mask blfs/*/introduction/important/building-notes.po
Translation file Not available
Last change Sept. 1, 2023, 6:15 a.m.
Last author None
3 weeks ago

String statistics

Strings percent Hosted strings Words percent Hosted words Characters percent Hosted characters
Total 166 6,022 42,014
Translated 100% 166 100% 6,022 100% 42,014
Needs editing 0% 0 0% 0 0% 0
Read-only 100% 166 100% 6,022 100% 42,014
Failing checks 0% 0 0% 0 0% 0
Strings with suggestions 0% 0 0% 0 0% 0
Untranslated strings 0% 0 0% 0 0% 0
Last 12 months Previous

Activity in last 12 months

0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 166 changes 0 changes 0 changes 0 changes
Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct

Quick numbers

6,022
Hosted words
166
Hosted strings
100%
Translated
0
Contributors
and previous 30 days

Trends of last 30 days

—
Hosted words
+100%
—
Hosted strings
+100%
—
Translated
+100%
—
Contributors
—
User avatar None

Source string added
Whilst gcc has many hardening options, clang/LLVM's strengths lie elsewhere. Some options which gcc provides are said to be less effective in clang/LLVM.
a year ago
User avatar None

Source string added
The main distros use much more, such as RELRO (Relocation Read Only) and perhaps <option>-fstack-clash-protection</option>. You may also encounter the so-called <quote>userspace retpoline</quote> (<option>-mindirect-branch=thunk</option> etc.) which is the equivalent of the spectre mitigations applied to the linux kernel in late 2018. The kernel mitigations caused a lot of complaints about lost performance, if you have a production server you might wish to consider testing that, along with the other available options, to see if performance is still sufficient.
a year ago
User avatar None

Source string added
For hardening options which are reasonably cheap, there is some discussion in the 'tuning' link above (occasionally, one or more of these options might be inappropriate for a package). These options are <option>-D_FORTIFY_SOURCE=2</option> and (for C++) <option>-D_GLIBCXX_ASSERTIONS</option>. On modern machines these should only have a little impact on how fast things run, and often they will not be noticeable.
a year ago
User avatar None

Source string added
In the past, there was Hardened LFS where gcc (a much older version) was forced to use hardening (with options to turn some of it off on a per-package basis). The current LFS and BLFS books are carrying forward a part of its spirit by enabling PIE (<option>-fPIE -pie</option>) and SSP (<option>-fstack-protector-strong</option>) as the defaults for GCC and clang. What is being covered here is different - first you have to make sure that the package is indeed using your added flags and not over-riding them.
a year ago
User avatar None

Source string added
Even on desktop systems, there are still a lot of exploitable vulnerabilities. For many of these, the attack comes via javascript in a browser. Often, a series of vulnerabilities are used to gain access to data (or sometimes to pwn, i.e. own, the machine and install rootkits). Most commercial distros will apply various hardening measures.
a year ago
User avatar None

Source string added
Options for hardening the build
a year ago
User avatar None

Source string added
The <option>-Wl,</option> prefix is necessary because despite the variable is named <envar>LDFLAGS</envar>, its content is actually passed to <command>gcc</command> (or <command>g++</command>, <command>clang</command>, etc.) during the link stage, not directly passed to <command>ld</command>.
a year ago
User avatar None

Source string added
With <option>-Wl,-z,pack-relative-relocs</option>, the linker generates a more compacted form of the relative relocation entries for PIEs and shared libraries. It reduces the size of the linked PIE or shared library, and speeds up the loading of the PIE or shared library.
a year ago
User avatar None

Source string added
With <option>-Wl,--as-needed</option>, the linker will disregard unnecessary <option>-l<replaceable>foo</replaceable></option> options from the command line, i. e. the shared library <systemitem class='library'>lib<replaceable>foo</replaceable></systemitem> will only be linked if a symbol in <systemitem class='library'>lib<replaceable>foo</replaceable></systemitem> is really referred from the executable or shared library being linked. This can sometimes mitigate the <quote>excessive dependencies to shared libraries</quote> issues caused by <application>libtool</application>.
a year ago
User avatar None

Source string added
With <option>-Wl,-O1</option>, the linker will optimize the hash table to speed up the dynamic linking. Note that <option>-Wl,-O1</option> is completely unrelated to the compiler optimization flag <option>-O1</option>.
a year ago
Browse all translation changes