> > btw, is "The entire NetBSD kernel and userland are built
> > with these extensions," true?  i thought its default was no.
> 
> it actually says "The system (userland, kernel) can be built with SSP by
> using the ``USE_SSP'' flag in /etc/mk.conf". to me it seems like it
> implies it's off by default, and can be enabled -- do you want me to
> clarify?

i'm talking about this paragraph:

    The entire NetBSD kernel and userland are built with these extensions,
    and it is recommended that you build additional software with them as
    well.  To do so, you will need to provide one of the -fstack-protector or
    -fstack-protector-all flags to gcc(1).

YAMAMOTO Takashi