Source strings

189 Strings 100%
Browse Translate
7,135 Words 100%
50,218 Characters 100%
This translation is being used as source strings within this component.

Strings status

Strings Words Characters
189 7,135 50,218
All strings Browse Translate Zen
189 7,135 50,218
Read-only strings Browse Translate Zen
1 186 1,220
Strings with any failing checks Browse Translate Zen
1 186 1,220
Failing check: Ellipsis Browse Translate Zen

Overview

Project website www.linuxfromscratch.org
Translation process
  • Translations can be made directly.
  • Translation suggestions can be made.
  • Any authenticated user can contribute.
  • The translation uses bilingual files.
Source code repository git@git.linuxfromscratch.org:fr-lfs
Repository branch 12.2
Last remote commit Add sed-es d5df9b577b
Julien Lepiller authored a month ago
Weblate repository https://translate.linuxfromscratch.org/git/linux-from-scratch-12-2/index/
File mask blfs/*/introduction/important/building-notes.po
Translation file Not available
Last change Sept. 5, 2024, 8:19 p.m.
Last author None
2 weeks ago

String statistics

Strings percent Hosted strings Words percent Hosted words Characters percent Hosted characters
Total 189 7,135 50,218
Translated 100% 189 100% 7,135 100% 50,218
Needs editing 0% 0 0% 0 0% 0
Read-only 100% 189 100% 7,135 100% 50,218
Failing checks 1% 1 2% 186 2% 1,220
Strings with suggestions 0% 0 0% 0 0% 0
Untranslated strings 0% 0 0% 0 0% 0
Last 12 months Previous

Activity in last 12 months

0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 189 changes
Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep

Quick numbers

7,135
Hosted words
189
Hosted strings
100%
Translated
0
Contributors
and previous 30 days

Trends of last 30 days

+100%
Hosted words
—
+100%
Hosted strings
—
+100%
Translated
—
—
Contributors
—
User avatar None

Source string added
Whilst gcc has many hardening options, clang/LLVM's strengths lie elsewhere. Some options which gcc provides are said to be less effective in clang/LLVM.
a month ago
User avatar None

Source string added
You may also encounter the so-called <quote>userspace retpoline</quote> (<option>-mindirect-branch=thunk</option> etc.) which is the equivalent of the spectre mitigations applied to the linux kernel in late 2018. The kernel mitigations caused a lot of complaints about lost performance, if you have a production server you might wish to consider testing that, along with the other available options, to see if performance is still sufficient.
a month ago
User avatar None

Source string added
In GCC 14, the option <option>-fhardened</option> is a shorthand to enable all the hardening options mentioned above. It sets <option>-D _FORTIFY_SOURCE=3</option> instead of <option>-D _FORTIFY_SOURCE=2</option>.
a month ago
User avatar None

Source string added
<option>-fcf-protection=full</option>: utilizes Intel and AMD CET technology to limit the target addresses of control-flow transfer instructions. To make it really effective for a package, all packages providing a shared library for the package to use must be built with this option, as well as that package itself, Glibc must be configured with the <option>--enable-cet</option> option enabled, and the system must run on Intel Tiger Lake or newer, or AMD Zen 3 or newer. If the criteria is not met the program compiled with this option will still run, but not really protected by CET.
a month ago
User avatar None

Source string added
<option>-ftrivial-auto-var-init=zero</option>: initializes some variables by filling zero bytes if they are not initialized by other means.
a month ago
User avatar None

Source string added
<option>-fstack-clash-protection</option>: prevents the attacker from using an offset large enough and not adequately checked to jump over the stack guard page placed by the kernel and the stack canary placed by <option>-fstack-protector=strong</option>, and modify the stack from a heap address, or vice versa.
a month ago
User avatar None

Source string added
<option>-Wl,-z,now</option>: disables lazy binding to enhance <option>-Wl,-z,relro</option>, so the <emphasis>entire</emphasis> GOT can be made immutable.
a month ago
User avatar None

Source string added
The main distros use much more, such as:
a month ago
User avatar None

Source string added
For hardening options which are reasonably cheap, there is some discussion in the 'tuning' link above (occasionally, one or more of these options might be inappropriate for a package). These options are <option>-D _FORTIFY_SOURCE=2</option> (or <option>-D _FORTIFY_SOURCE=3</option> which is more secure but with a larger performance overhead) and (for C++) <option>-D _GLIBCXX_ASSERTIONS</option>. On modern machines these should only have a little impact on how fast things run, and often they will not be noticeable.
a month ago
User avatar None

Source string added
In the past, there was Hardened LFS where gcc (a much older version) was forced to use hardening (with options to turn some of it off on a per-package basis). The current LFS and BLFS books are carrying forward a part of its spirit by enabling PIE (<option>-fPIE -pie</option>) and SSP (<option>-fstack-protector-strong</option>) as the defaults for GCC and clang. And, the linkers (<command>ld.bfd</command> and <command>ld.gold</command>) have also enabled <option>-Wl,-z,relro</option> which makes a part of the Global Offset Table (GOT) immutable, by default since Binutils 2.27. What is being covered here is different - first you have to make sure that the package is indeed using your added flags and not over-riding them.
a month ago
Browse all translation changes