gcc --version
gcc (GCC) 3.4.3 20041212 (Red Hat 3.4.3-9.EL4)

Linux 2.6.9-5.ELsmp #1 SMP Wed Jan 5 19:30:39 EST 2005 i686 i686 i386 GNU/Linux

vsftpd built 3.0.2

I am seeing this error when I try to implement the steps outlined for installing vsftpd:

# make
gcc -c main.c -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wall -W -Wshadow -Werror -Wformat-security -D_FORTIFY_SOURCE=2 -idirafter dummyinc
cc1: error: unrecognized command line option "-fstack-protector"
cc1: error: invalid parameter `ssp-buffer-size'
make: *** [main.o] Error 1


It seems that the compiler is choking on the '-fstack-protector' option. Can I get some guidance on what is wrong? Is it versioning? I realize that RHEL4 is old but I don't have any control over that and have to work w/what I am given.

Please forgive my ignorance if I have referred to some term or concept incorrectly...still learning!

Regards,

And so is your gcc tool chain, yes. AFAIK RHSA-2011-0337 lists vsftpd-2.0.1-9.el4.%{arch}.rpm as the latest one you can get which is a far cry from vsftpd-3.0.2.


I always wonder if that line is a hedge against having to confront coworkers / managers / IT dept. pointing out the futility of weakening unsupported, insecure systems (even more)?.. Since you can't upgrade your tool chain w/o upgrading RHEL I suggest you find an alternative, like hosting that FTP service on a recent, properly secured system.

Is this a Linux board or some sort of tough love psychology chat service?...thanks but sometime you have to take things at face value.

Thanks for the info regarding the tool chain and pointing me to the Red Hat Security Advisories, but seems it is irrelevant can't find a credible source for the vsftpd-2.0.1-9.el4.i386.rpm(or more likely, don't know where to look...)