aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBryan Drewery <bdrewery@FreeBSD.org>2013-09-20 12:54:54 +0000
committerBryan Drewery <bdrewery@FreeBSD.org>2013-09-20 12:54:54 +0000
commitc93dfc2e9f8b7b990c22c6baa6cdab361cd12e16 (patch)
treee61ab76efa292f985d8e20e449572329fa964c1c
parentb10d5a64b7ea8bb32e9735304272e7344926e3b2 (diff)
downloadports-c93dfc2e9f8b7b990c22c6baa6cdab361cd12e16.tar.gz
ports-c93dfc2e9f8b7b990c22c6baa6cdab361cd12e16.zip
Notes
-rw-r--r--CHANGES22
-rw-r--r--Mk/bsd.port.mk11
-rw-r--r--Mk/bsd.ssp.mk30
-rw-r--r--UPDATING24
-rw-r--r--audio/csound/Makefile1
-rw-r--r--audio/emu10kx/Makefile7
-rw-r--r--audio/oss/Makefile1
-rw-r--r--comms/uarduno/Makefile2
-rw-r--r--comms/uartlirc/Makefile8
-rw-r--r--devel/libtecla/Makefile8
-rw-r--r--devel/mingw32-gcc/Makefile2
-rw-r--r--dns/c-ares/Makefile2
-rw-r--r--editors/emacs21/Makefile2
-rw-r--r--emulators/kqemu-kmod-devel/Makefile2
-rw-r--r--emulators/kqemu-kmod/Makefile2
-rw-r--r--emulators/open-vm-tools/Makefile2
-rw-r--r--emulators/parallels-tools/Makefile7
-rw-r--r--emulators/rtc/Makefile7
-rw-r--r--ftp/curl-hiphop/Makefile8
-rw-r--r--ftp/curl/Makefile2
-rw-r--r--games/gtkradiant/Makefile1
-rw-r--r--graphics/kix-kmod/Makefile8
-rw-r--r--graphics/plasma-kmod/Makefile8
-rw-r--r--lang/gcc/Makefile1
-rw-r--r--lang/gcc34/Makefile1
-rw-r--r--lang/gcc42/Makefile1
-rw-r--r--lang/gcc44/Makefile1
-rw-r--r--lang/gcc46/Makefile1
-rw-r--r--lang/gcc47/Makefile1
-rw-r--r--lang/gcc48/Makefile1
-rw-r--r--lang/gcc49/Makefile1
-rw-r--r--lang/libobjc2/Makefile2
-rw-r--r--lang/ocaml/Makefile1
-rw-r--r--misc/dahdi-kmod/Makefile8
-rw-r--r--misc/dahdi-kmod26/Makefile8
-rw-r--r--multimedia/cuse4bsd-kmod/Makefile1
-rw-r--r--multimedia/cx88/Makefile1
-rw-r--r--multimedia/linux_dvbwrapper-kmod/Makefile1
-rw-r--r--multimedia/ptx-kmod/Makefile2
-rw-r--r--multimedia/pwcbsd/Makefile2
-rw-r--r--net-mgmt/netams/Makefile1
-rw-r--r--net/aoe/Makefile9
-rw-r--r--net/etherboot/Makefile1
-rw-r--r--net/iet/Makefile3
-rw-r--r--net/ng_daphne/Makefile8
-rw-r--r--net/ng_mikrotik_eoip/Makefile2
-rw-r--r--net/skyfish/Makefile8
-rw-r--r--net/userfw/Makefile7
-rw-r--r--print/acroreadwrapper/Makefile10
-rw-r--r--security/quantis-kmod/Makefile1
-rw-r--r--sysutils/acpi_call/Makefile8
-rw-r--r--sysutils/biosfont/Makefile2
-rw-r--r--sysutils/fusefs-kmod/Makefile2
-rw-r--r--sysutils/graid5/Makefile7
-rw-r--r--sysutils/grub2/Makefile1
-rw-r--r--sysutils/mono-kmod/Makefile7
-rw-r--r--sysutils/pefs-kmod/Makefile3
-rw-r--r--sysutils/pmap/Makefile1
-rw-r--r--sysutils/scprotect/Makefile7
-rw-r--r--sysutils/vordog/Makefile7
-rw-r--r--x11/nvidia-driver/Makefile1
61 files changed, 192 insertions, 105 deletions
diff --git a/CHANGES b/CHANGES
index fa799081120b..bc848b646fd9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -10,6 +10,28 @@ in the release notes and/or placed into UPDATING.
All ports committers are allowed to commit to this file.
+20130920:
+AUTHOR: bdrewery@FreeBSD.org
+
+ SSP support has been added to ports with WITH_SSP for i386 and amd64
+ on FreeBSD 10, and amd64 on earlier versions.
+
+ SSP_UNSAFE is added to disable in a port if it fails to build, but
+ this should only be used in rare circumstances such as kernel modules.
+ Otherwise, the port may just be failing due to lack of respecting
+ LDFLAGS.
+
+ On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in
+ libssp_nonshared.a to address issues linking on i386 [1].
+
+ On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared
+ to LDFLAGS on i386. This is not needed on amd64. However, several hundred
+ ports do not currently respect LDFLAGS, so this support is disabled currently
+ as it causes build failures if a dependency is looking for the stack_chk
+ symbols.
+
+ [1] http://svnweb.freebsd.org/base/head/lib/libc/libc.ldscript?revision=251668&view=markup
+
20130919:
AUTHOR: gahr@FreeBSD.org
diff --git a/Mk/bsd.port.mk b/Mk/bsd.port.mk
index a86c85c3c8ca..3fe95b34cbfb 100644
--- a/Mk/bsd.port.mk
+++ b/Mk/bsd.port.mk
@@ -301,6 +301,13 @@ FreeBSD_MAINTAINER= portmgr@FreeBSD.org
# passed to the compiler by setting DEBUG_FLAGS. It is
# set to "-g" at default.
#
+# WITH_SSP - If set, SSP_FLAGS (defaults to -fstack-protector)
+# is added to CFLAGS and the necessary flags
+# are added to LDFLAGS. Note that SSP_UNSAFE
+# can be used in Makefiles by port maintainers
+# if a port breaks with it (it should be
+# extremely rare).
+#
# USE_BZIP2 - If set, this port tarballs use bzip2, not gzip, for
# compression.
# USE_LHA - If set, this port distfile uses lha for compression
@@ -1563,6 +1570,10 @@ DEBUG_FLAGS?= -g
CFLAGS:= ${CFLAGS:N-O*:N-fno-strict*} ${DEBUG_FLAGS}
.endif
+.if defined(WITH_SSP)
+.include "${PORTSDIR}/Mk/bsd.ssp.mk"
+.endif
+
.if defined(NOPORTDOCS)
PLIST_SUB+= PORTDOCS="@comment "
.else
diff --git a/Mk/bsd.ssp.mk b/Mk/bsd.ssp.mk
new file mode 100644
index 000000000000..c71b3b3722c4
--- /dev/null
+++ b/Mk/bsd.ssp.mk
@@ -0,0 +1,30 @@
+# $FreeBSD$
+# SSP Support
+
+SSP_Include_MAINTAINER= portmgr@FreeBSD.org
+
+# See: http://svnweb.freebsd.org/base/head/lib/libc/libc.ldscript?revision=251668&view=markup
+.if ${OSVERSION} < 1000036 && ${ARCH} == i386
+
+# Disabled on i386 for now on releases without the ldscript as too many ports
+# do not respect LDFLAGS and fail to build due to not adding in -lssp_nonshared when needed
+# despite dependencies working fine, which breaks a lot. Can enable once LDFLAGS is more
+# supported. XXX
+SSP_UNSAFE= yes
+
+# i386 needs -lssp_nonshared, see svn link above for more information
+SSP_NEED_NONSHARED= yes
+.endif
+
+.if defined(WITH_SSP) && !defined(WITHOUT_SSP) && !defined(SSP_UNSAFE) && \
+ (${ARCH} == i386 || ${ARCH} == amd64)
+# Overridable as a user may want to use -fstack-protector-all
+SSP_CFLAGS?= -fstack-protector
+CFLAGS:= ${CFLAGS} ${SSP_CFLAGS}
+LDFLAGS:= ${LDFLAGS} -fstack-protector
+# -lssp_nonshared is needed on i386 where /usr/lib/libc.so is not an ldscript
+# This is currently unused XXX
+. if defined(SSP_NEED_NONSHARED)
+LDFLAGS:= ${LDFLAGS} -lssp_nonshared
+. endif
+.endif
diff --git a/UPDATING b/UPDATING
index d6d36bf85970..d79bd01355aa 100644
--- a/UPDATING
+++ b/UPDATING
@@ -5,6 +5,30 @@ they are unavoidable.
You should get into the habit of checking this file for changes each time
you update your ports collection, before attempting any port upgrades.
+20130920:
+ AFFECTS: Users of ports
+ AUTHOR: bdrewery@FreeBSD.org
+
+ Optional Stack Protector [1] support has been added with the WITH_SSP
+ knob.
+
+ This currently is only supported on FreeBSD 10 amd64/i386 and earlier
+ releases on amd64 only.
+
+ The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all
+ may optionally be set instead.
+
+ To enable support, add WITH_SSP=yes to your make.conf and rebuild all
+ ports.
+
+ # portmaster -af
+
+ or
+
+ # portupgrade -af
+
+ [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection
+
20130904:
AFFECTS: 10-CURRENT users with any port depending on converters/libiconv
AUTHOR: madpilot@FreeBSD.org
diff --git a/audio/csound/Makefile b/audio/csound/Makefile
index c6d3fbfde4dc..8456395c3cc3 100644
--- a/audio/csound/Makefile
+++ b/audio/csound/Makefile
@@ -35,6 +35,7 @@ FLTK_DESC= Build FLTK plugin and GUI
CONFLICTS_INSTALL= outguess-*
+SSP_UNSAFE= yes
USE_PYTHON= 2.6+
USES= bison gettext
USE_SCONS= yes
diff --git a/audio/emu10kx/Makefile b/audio/emu10kx/Makefile
index cb603ef03285..c96e31df21f2 100644
--- a/audio/emu10kx/Makefile
+++ b/audio/emu10kx/Makefile
@@ -1,9 +1,5 @@
-# Ports collection makefile for: emu10kx
-# Date created: 7 Aug 2005
-# Whom: michaels@sdf.lonestar.org
-#
+# Created by: michaels@sdf.lonestar.org
# $FreeBSD$
-#
PORTNAME= emu10kx
PORTVERSION= 20051021
@@ -17,6 +13,7 @@ COMMENT= SBLive!, Audigy, and Audigy2 driver for FreeBSD
USE_BZIP2= yes
NO_PACKAGE= should be recompiled for a particular FreeBSD kernel
+SSP_UNSAFE= kernel module does not support ssp
MAN8= emuctrl.8
PLIST_FILES= sbin/emuctrl etc/rc.d/emuctrl.sh
diff --git a/audio/oss/Makefile b/audio/oss/Makefile
index d3a08f0438a3..f212a9077d1a 100644
--- a/audio/oss/Makefile
+++ b/audio/oss/Makefile
@@ -14,6 +14,7 @@ LICENSE= BSD
BUILD_DEPENDS= gawk:${PORTSDIR}/lang/gawk
+SSP_UNSAFE= kernel module does not support ssp
USE_BZIP2= yes
ALL_TARGET= all install
USE_GNOME= gtk20
diff --git a/comms/uarduno/Makefile b/comms/uarduno/Makefile
index 48b9ef86599a..ce45b8863684 100644
--- a/comms/uarduno/Makefile
+++ b/comms/uarduno/Makefile
@@ -11,6 +11,8 @@ COMMENT= FreeBSD Kernel Driver for the Arduino Uno USB interface
NO_PACKAGE= You must (re)build this port with your kernel source
+SSP_UNSAFE= kernel module does not support ssp
+
# need to enforce installation into kernel module directory
MAKE_ENV+= KMODDIR=${KMODDIR}
PREFIX= ${KMODDIR}
diff --git a/comms/uartlirc/Makefile b/comms/uartlirc/Makefile
index 2d8f55c8ff1c..545376a5e8e1 100644
--- a/comms/uartlirc/Makefile
+++ b/comms/uartlirc/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: uarlirc
-# Date created: Sun May 13 17:39:40 CEST 2012
-# Whom: nox@FreeBSD.org
-#
+# Created by: nox@FreeBSD.org
# $FreeBSD$
-#
PORTNAME= uartlirc
PORTVERSION= 0.3
@@ -17,6 +13,8 @@ EXTRACT_SUFX= .shar
MAINTAINER= nox@FreeBSD.org
COMMENT= Driver for "homebrew" serial LIRC receivers
+SSP_UNSAFE= kernel module does not support ssp
+
WRKSRC= ${WRKDIR}/${PORTNAME}
EXTRACT_CMD= ${SH}
EXTRACT_BEFORE_ARGS=
diff --git a/devel/libtecla/Makefile b/devel/libtecla/Makefile
index 8f79aa16446d..467439fa7b8f 100644
--- a/devel/libtecla/Makefile
+++ b/devel/libtecla/Makefile
@@ -1,10 +1,5 @@
-# ex:ts=8
-# New ports collection makefile for: libtecla
-# Date created: Feb 12, 2001
-# Whom: Ying-Chieh Liao <ijliao@FreeBSD.org>
-#
+# Created by: Ying-Chieh Liao <ijliao@FreeBSD.org>
# $FreeBSD$
-#
PORTNAME= libtecla
PORTVERSION= 1.6.2
@@ -25,6 +20,7 @@ SCRIPTS_ENV= WRKDIRPREFIX="${WRKDIRPREFIX}" \
REALCURDIR="${.CURDIR}" \
PORTNAME="${PORTNAME}"
MAKE_JOBS_UNSAFE= yes
+SSP_UNSAFE= yes
.include <bsd.port.pre.mk>
diff --git a/devel/mingw32-gcc/Makefile b/devel/mingw32-gcc/Makefile
index 9b8b545efd34..5fd022f934c5 100644
--- a/devel/mingw32-gcc/Makefile
+++ b/devel/mingw32-gcc/Makefile
@@ -20,6 +20,8 @@ LIB_DEPENDS= gmp:${PORTSDIR}/math/gmp \
GCCVERSION= 4.7.2
+SSP_UNSAFE= yes
+
ONLY_FOR_ARCHS= amd64 i386 powerpc powerpc64 sparc64
USE_LDCONFIG= yes
USES= bison iconv gmake perl5
diff --git a/dns/c-ares/Makefile b/dns/c-ares/Makefile
index c7fe96a0cdf5..a73d22a27000 100644
--- a/dns/c-ares/Makefile
+++ b/dns/c-ares/Makefile
@@ -13,6 +13,8 @@ COMMENT= An asynchronous DNS resolver library
LICENSE= MIT
+SSP_UNSAFE= Refuses -l in LDFLAGS
+
OPTIONS_DEFINE= CONFIG_INFO DEBUG HIDE_SYMBOLS OPTIMIZED_CFLAGS
OPTIONS_DEFAULT= CONFIG_INFO HIDE_SYMBOLS
diff --git a/editors/emacs21/Makefile b/editors/emacs21/Makefile
index d7ee891b3e85..48b2710722f9 100644
--- a/editors/emacs21/Makefile
+++ b/editors/emacs21/Makefile
@@ -21,6 +21,8 @@ CONFLICTS= emacs-19.* emacs-22.* emacs-23.* emacs-24.* \
xemacs-[0-9]* xemacs-devel-[0-9]* \
xemacs-mule-[0-9]* xemacs-devel-mule-[0-9]*
+SSP_UNSAFE= yes
+
.if !defined(WITHOUT_X11)
LIB_DEPENDS= Xaw3d:${PORTSDIR}/x11-toolkits/Xaw3d \
jpeg.11:${PORTSDIR}/graphics/jpeg \
diff --git a/emulators/kqemu-kmod-devel/Makefile b/emulators/kqemu-kmod-devel/Makefile
index 181dde346e7d..63e78af63933 100644
--- a/emulators/kqemu-kmod-devel/Makefile
+++ b/emulators/kqemu-kmod-devel/Makefile
@@ -19,6 +19,8 @@ COMMENT= Kernel Accelerator for QEMU CPU Emulator (development version)
LICENSE= GPLv2
LICENSE_FILE= ${WRKSRC}/COPYING
+SSP_UNSAFE= kernel module does not support ssp
+
ONLY_FOR_ARCHS= i386 amd64
HAS_CONFIGURE= yes
USE_GMAKE= yes
diff --git a/emulators/kqemu-kmod/Makefile b/emulators/kqemu-kmod/Makefile
index 7d9c5aad4ee1..3283821e51e7 100644
--- a/emulators/kqemu-kmod/Makefile
+++ b/emulators/kqemu-kmod/Makefile
@@ -19,6 +19,8 @@ COMMENT= Kernel Accelerator for QEMU CPU Emulator
LICENSE= GPLv2
LICENSE_FILE= ${WRKSRC}/COPYING
+SSP_UNSAFE= kernel module does not support ssp
+
ONLY_FOR_ARCHS= i386 amd64
HAS_CONFIGURE= yes
USE_GMAKE= yes
diff --git a/emulators/open-vm-tools/Makefile b/emulators/open-vm-tools/Makefile
index a2caf938d450..45dca188c45c 100644
--- a/emulators/open-vm-tools/Makefile
+++ b/emulators/open-vm-tools/Makefile
@@ -24,6 +24,8 @@ USES= pkgconfig
USE_LDCONFIG= yes
CPPFLAGS+= -Wno-deprecated-declarations
+SSP_UNSAFE= kernel module does not support ssp
+
CONFIGURE_ARGS+= --without-procps --sysconfdir=${LOCALBASE}/etc
.if defined(WITHOUT_X11)
LIB_DEPENDS+= glib-2.0:${PORTSDIR}/devel/glib20
diff --git a/emulators/parallels-tools/Makefile b/emulators/parallels-tools/Makefile
index 034a37f6ce8f..690322a71fc1 100644
--- a/emulators/parallels-tools/Makefile
+++ b/emulators/parallels-tools/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: parallels-tools
-# Date created: 14 Jun 2009
-# Whom: Alexander Nedotsukov <bland@FreeBSD.org>
-#
+# Created by: Alexander Nedotsukov <bland@FreeBSD.org>
# $FreeBSD$
-#
PORTNAME= parallels-tools
PORTVERSION= 0.1.1
@@ -14,6 +10,7 @@ MASTER_SITE_SUBDIR= bland
MAINTAINER= bland@FreeBSD.org
COMMENT= Parallels Desktop Tools for FreeBSD
+SSP_UNSAFE= kernel module does not support ssp
USE_BZIP2= yes
ONLY_FOR_ARCHS= amd64 i386
diff --git a/emulators/rtc/Makefile b/emulators/rtc/Makefile
index ce5856a2af5e..6cddc08adeba 100644
--- a/emulators/rtc/Makefile
+++ b/emulators/rtc/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: rtc
-# Date created: 28 March 2000
-# Whom: Akinori MUSHA aka knu <knu@idaemons.org>
-#
+# Created by: Akinori MUSHA aka knu <knu@idaemons.org>
# $FreeBSD$
-#
PORTNAME= rtc
PORTVERSION= 2004.02.24.1
@@ -17,6 +13,7 @@ COMMENT= Kernel module which provides /dev/rtc device support
WRKSRC= ${WRKDIR}/files
+SSP_UNSAFE= kernel module does not support ssp
NO_FETCH= yes
USE_LINUX= yes # because of ${DEVDIR}
diff --git a/ftp/curl-hiphop/Makefile b/ftp/curl-hiphop/Makefile
index f50778cd0bad..1ee9655e78ac 100644
--- a/ftp/curl-hiphop/Makefile
+++ b/ftp/curl-hiphop/Makefile
@@ -1,15 +1,13 @@
-# New ports collection makefile for: curl-hiphop
-# Date created: 16 July 2012
-# Whom: Martin Matuska <mm@FreeBSd.org>
-#
+# Created by: Martin Matuska <mm@FreeBSD.org>
# $FreeBSD$
-#
PKGNAMESUFFIX= -hiphop
MAINTAINER= mm@FreeBSD.org
COMMENT= Static libcurl with custom patches for HipHop
+SSP_UNSAFE= Refuses -l in LDFLAGS
+
BUILDING_HIPHOP= yes
HIPHOP_DIR= share/hiphop-php
diff --git a/ftp/curl/Makefile b/ftp/curl/Makefile
index 370e51815d8d..a949fd29071e 100644
--- a/ftp/curl/Makefile
+++ b/ftp/curl/Makefile
@@ -14,6 +14,8 @@ COMMENT?= Non-interactive tool to get files from FTP, GOPHER, HTTP(S) servers
LICENSE= MIT
+SSP_UNSAFE= Refuses -l in LDFLAGS
+
OPTIONS_DEFINE= CA_BUNDLE COOKIES CURL_DEBUG DEBUG DOCS EXAMPLES GSSAPI IDN IPV6 LDAP LDAPS LIBSSH2 NTLM PROXY RTMP SPNEGO TLS_SRP
OPTIONS_RADIO= RESOLV SSL
OPTIONS_RADIO_RESOLV= CARES THREADED_RESOLVER
diff --git a/games/gtkradiant/Makefile b/games/gtkradiant/Makefile
index 2ccdeecec3e7..a7dc1def25cf 100644
--- a/games/gtkradiant/Makefile
+++ b/games/gtkradiant/Makefile
@@ -20,6 +20,7 @@ LIB_DEPENDS= libgtkglext-x11-1.0.so:${PORTSDIR}/x11-toolkits/gtkglext \
libmhash.so:${PORTSDIR}/security/mhash \
libpng15.so:${PORTSDIR}/graphics/png
+SSP_UNSAFE= yes
USES= pkgconfig
USE_ZIP= yes
USE_GNOME= gtk20 libxml2
diff --git a/graphics/kix-kmod/Makefile b/graphics/kix-kmod/Makefile
index 0de7eb0f06b2..cb3dc9bd21a3 100644
--- a/graphics/kix-kmod/Makefile
+++ b/graphics/kix-kmod/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: kix-kmod
-# Date created: 4 January 2003
-# Whom: Jonathan Belson <jon@witchspace.com>
-#
+# Created by: Jonathan Belson <jon@witchspace.com>
# $FreeBSD$
-#
PORTNAME= kix
PORTVERSION= 1.0
@@ -16,6 +12,8 @@ PKGNAMESUFFIX= -kmod
MAINTAINER= jon@witchspace.com
COMMENT= A graphical screensaver kernel module
+SSP_UNSAFE= kernel module does not support ssp
+
.include <bsd.port.pre.mk>
SYSDIR?= ${SRC_BASE}/sys
diff --git a/graphics/plasma-kmod/Makefile b/graphics/plasma-kmod/Makefile
index 3c6c20c5d7c1..54dac001f530 100644
--- a/graphics/plasma-kmod/Makefile
+++ b/graphics/plasma-kmod/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: plasma-kmod
-# Date created: 24 January 2001
-# Whom: George Reid <greid@ukug.uk.freebsd.org>
-#
+# Created by: George Reid <greid@ukug.uk.freebsd.org>
# $FreeBSD$
-#
PORTNAME= plasma
PORTVERSION= 0.1
@@ -17,6 +13,8 @@ COMMENT= A plasma-effect screensaver kernel module
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
+
.include <bsd.port.pre.mk>
.if !exists(${SRC_BASE}/sys/dev/syscons/syscons.h)
diff --git a/lang/gcc/Makefile b/lang/gcc/Makefile
index 7a704e9d2480..5c7fce579080 100644
--- a/lang/gcc/Makefile
+++ b/lang/gcc/Makefile
@@ -32,6 +32,7 @@ USES= bison gmake iconv perl5
USE_BINUTILS= yes
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc34/Makefile b/lang/gcc34/Makefile
index f8868d5a73b1..996b06f28197 100644
--- a/lang/gcc34/Makefile
+++ b/lang/gcc34/Makefile
@@ -21,6 +21,7 @@ LATEST_LINK= gcc${SUFFIX}${PKGNAMESUFFIX}
USES= bison gmake iconv perl5
USE_BZIP2= yes
USE_PERL= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:C/${WRKDIR}//}/configure
diff --git a/lang/gcc42/Makefile b/lang/gcc42/Makefile
index ef933775fbae..7a5df5e49bd3 100644
--- a/lang/gcc42/Makefile
+++ b/lang/gcc42/Makefile
@@ -27,6 +27,7 @@ USES= bison gmake iconv perl5
USE_BZIP2= yes
USE_CSTD= gnu89
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc44/Makefile b/lang/gcc44/Makefile
index ab8880749455..4d1cefafefb0 100644
--- a/lang/gcc44/Makefile
+++ b/lang/gcc44/Makefile
@@ -25,6 +25,7 @@ USE_BINUTILS= yes
USES= bison gmake iconv perl5
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc46/Makefile b/lang/gcc46/Makefile
index 44a6241f1a75..074f5fb6abca 100644
--- a/lang/gcc46/Makefile
+++ b/lang/gcc46/Makefile
@@ -34,6 +34,7 @@ USES= bison gmake iconv perl5
USE_BINUTILS= yes
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc47/Makefile b/lang/gcc47/Makefile
index 3726df56e8a1..ce0eb3bbd234 100644
--- a/lang/gcc47/Makefile
+++ b/lang/gcc47/Makefile
@@ -33,6 +33,7 @@ USES= bison gmake iconv perl5
USE_BINUTILS= yes
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc48/Makefile b/lang/gcc48/Makefile
index fc48334432b0..4d6049c10b89 100644
--- a/lang/gcc48/Makefile
+++ b/lang/gcc48/Makefile
@@ -33,6 +33,7 @@ USES= bison gmake iconv perl5
USE_BINUTILS= yes
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/gcc49/Makefile b/lang/gcc49/Makefile
index 83d35b6e06a0..e3a210bf363f 100644
--- a/lang/gcc49/Makefile
+++ b/lang/gcc49/Makefile
@@ -33,6 +33,7 @@ USES= gmake iconv perl5
USE_BINUTILS= yes
USE_BZIP2= yes
USE_PERL5= build
+SSP_UNSAFE= yes
PATCH_WRKSRC= ${SRCDIR}
CONFIGURE_SCRIPT= ../${SRCDIR:S/${WRKDIR}\///}/configure
diff --git a/lang/libobjc2/Makefile b/lang/libobjc2/Makefile
index bcad3448ea16..7325abd055e7 100644
--- a/lang/libobjc2/Makefile
+++ b/lang/libobjc2/Makefile
@@ -9,6 +9,8 @@ MASTER_SITES= http://download.gna.org/gnustep/
MAINTAINER= theraven@FreeBSD.org
COMMENT= Replacement Objective-C runtime supporting modern Objective-C features
+SSP_UNSAFE= yes
+
.include <bsd.port.options.mk>
USES= cmake
diff --git a/lang/ocaml/Makefile b/lang/ocaml/Makefile
index 393dfe9b10d6..5354fd067f74 100644
--- a/lang/ocaml/Makefile
+++ b/lang/ocaml/Makefile
@@ -20,6 +20,7 @@ REINPLACE_ARGS= -i ""
HAS_CONFIGURE= yes
ALL_TARGET= world.opt
STRIP=
+SSP_UNSAFE= yes
MAKE_JOBS_UNSAFE= yes
CONFIGURE_ARGS= -verbose -prefix "${PREFIX}" -cc "${CC}" -as "${AS}" \
diff --git a/misc/dahdi-kmod/Makefile b/misc/dahdi-kmod/Makefile
index dff49192ab5e..6ee6aa3b2d84 100644
--- a/misc/dahdi-kmod/Makefile
+++ b/misc/dahdi-kmod/Makefile
@@ -1,9 +1,5 @@
-# Ports collection makefile for: dahdi
-# Date created: 3 Mar 2010
-# Whom: Maxim Khon <fjoe@FreeBSD.org>
-#
+# Created by: Maxim Khon <fjoe@FreeBSD.org>
# $FreeBSD$
-#
PORTNAME= dahdi-kmod
PORTVERSION= ${DAHDI_VERSION:S/-//g}
@@ -22,6 +18,8 @@ COMMENT= Digium/Asterisk Hardware Device Interface
RUN_DEPENDS= ${LOCALBASE}/sbin/dahdi_cfg:${PORTSDIR}/misc/dahdi
+SSP_UNSAFE= kernel module does not support ssp
+
DAHDI_VERSION= 2.4.0-rc5
DAHDI_TOOLS_VERSION= 2.4.0-rc1
OSLEC_VERSION= 2.6.35.4
diff --git a/misc/dahdi-kmod26/Makefile b/misc/dahdi-kmod26/Makefile
index 5cc31abfaa87..1b2e117e33a9 100644
--- a/misc/dahdi-kmod26/Makefile
+++ b/misc/dahdi-kmod26/Makefile
@@ -1,9 +1,5 @@
-# Ports collection makefile for: dahdi
-# Date created: 3 Mar 2010
-# Whom: Maxim Khon <fjoe@FreeBSD.org>
-#
+# Created by: Maxim Khon <fjoe@FreeBSD.org>
# $FreeBSD$
-#
PORTNAME= dahdi-kmod26
PORTVERSION= ${DAHDI_VERSION:S/-/./g}
@@ -22,6 +18,8 @@ COMMENT= Digium/Asterisk Hardware Device Interface
RUN_DEPENDS= ${LOCALBASE}/sbin/dahdi_cfg:${PORTSDIR}/misc/dahdi
+SSP_UNSAFE= kernel module does not support ssp
+
DAHDI_VERSION= 2.6.1-r10738
DAHDI_TOOLS_VERSION= 2.4.0-rc1
OSLEC_VERSION= 2.6.35.4
diff --git a/multimedia/cuse4bsd-kmod/Makefile b/multimedia/cuse4bsd-kmod/Makefile
index 38cd12a3b976..9bb5b30b543f 100644
--- a/multimedia/cuse4bsd-kmod/Makefile
+++ b/multimedia/cuse4bsd-kmod/Makefile
@@ -11,6 +11,7 @@ COMMENT= Cuse4BSD character device loopback driver for userspace
CONFLICTS= video4bsd-kmod*
+SSP_UNSAFE= kernel module does not support ssp
USE_BZIP2= yes
KMODDIR= /boot/modules
diff --git a/multimedia/cx88/Makefile b/multimedia/cx88/Makefile
index c38aea254495..8af6a880b8cd 100644
--- a/multimedia/cx88/Makefile
+++ b/multimedia/cx88/Makefile
@@ -18,6 +18,7 @@ KMODDIR= /boot/modules
PLIST_SUB+= KMODDIR=${KMODDIR}
MAKE_ARGS+= LIBTUNER_LIB=${LOCALBASE}/lib/libtuner LIBTUNER_HEADER=${LOCALBASE}/include/libtuner KMODDIR=${KMODDIR}
MAKE_JOBS_UNSAFE= yes
+SSP_UNSAFE= kernel module does not support ssp
OPTIONS_DEFINE= DEBUG LINUX_COMPAT HAL
diff --git a/multimedia/linux_dvbwrapper-kmod/Makefile b/multimedia/linux_dvbwrapper-kmod/Makefile
index 5e834b7a3e0b..488aa45aacd2 100644
--- a/multimedia/linux_dvbwrapper-kmod/Makefile
+++ b/multimedia/linux_dvbwrapper-kmod/Makefile
@@ -10,6 +10,7 @@ DISTFILES= # none
MAINTAINER= nox@FreeBSD.org
COMMENT= Linux compatibility layer - DVB ioctl handler
+SSP_UNSAFE= kernel module does not support ssp
ONLY_FOR_ARCHS= i386 amd64
.include <bsd.port.pre.mk>
diff --git a/multimedia/ptx-kmod/Makefile b/multimedia/ptx-kmod/Makefile
index 721f72f6d0ee..abd81c3d7a0e 100644
--- a/multimedia/ptx-kmod/Makefile
+++ b/multimedia/ptx-kmod/Makefile
@@ -13,6 +13,8 @@ COMMENT= Device driver for PT1/PT2 ISDB-S/T tuner cards
LICENSE= GPLv3
+SSP_UNSAFE= kernel module does not support ssp
+
ONLY_FOR_ARCHS= amd64 i386
BUILD_WRKSRC= ${WRKSRC}/dev/ptx
MAKE_ENV= KMODDIR=${PREFIX}/${KMODDIR} SYSDIR=${SYSDIR}
diff --git a/multimedia/pwcbsd/Makefile b/multimedia/pwcbsd/Makefile
index e5ee2b056012..dac0c29fbadb 100644
--- a/multimedia/pwcbsd/Makefile
+++ b/multimedia/pwcbsd/Makefile
@@ -15,6 +15,8 @@ COMMENT= The Linux pwc webcam driver ported to FreeBSD
CONFLICTS= pwcview-[0-9]*
+SSP_UNSAFE= kernel module does not support ssp
+
MAN4= pwc.4
WRKSRC= ${WRKDIR}/${PORTNAME}
diff --git a/net-mgmt/netams/Makefile b/net-mgmt/netams/Makefile
index 0c29d3ce00f9..986be9ae8d8a 100644
--- a/net-mgmt/netams/Makefile
+++ b/net-mgmt/netams/Makefile
@@ -12,6 +12,7 @@ COMMENT= Network Traffic Accounting and Monitoring Software
LIB_DEPENDS= pcap.1:${PORTSDIR}/net/libpcap
+SSP_UNSAFE= kernel module does not support ssp
USE_SUBMAKE= yes
SUB_FILES= pkg-message
USE_RC_SUBR= netams
diff --git a/net/aoe/Makefile b/net/aoe/Makefile
index 29da5efad00b..b180917fda60 100644
--- a/net/aoe/Makefile
+++ b/net/aoe/Makefile
@@ -1,13 +1,9 @@
-# Ports collection makefile for: aoe (ATA Over Ethernet) driver
-# Date created: 22 May 2006
-# Whom: Stacey D. Son <sds@son.org>
-#
+# Created by: Stacey D. Son <sds@son.org>
# $FreeBSD$
-#
PORTNAME= aoe
PORTVERSION= 1.2.0
-CATEGORIES= net
+CATEGORIES= net kld
MASTER_SITES= http://www.son.org/download/
DISTNAME= ${PORTNAME}-freebsd-${PORTVERSION}
@@ -15,6 +11,7 @@ MAINTAINER= fjoe@FreeBSD.org
COMMENT= FreeBSD driver for ATA over Ethernet (AoE)
NO_PACKAGE= Should be in sync with the kernel to work correctly
+SSP_UNSAFE= kernel module does not support ssp
WRKSRC= ${WRKDIR}/dev/aoe
MAN4= aoe.4
diff --git a/net/etherboot/Makefile b/net/etherboot/Makefile
index 959955dd5026..a5567998bafc 100644
--- a/net/etherboot/Makefile
+++ b/net/etherboot/Makefile
@@ -9,6 +9,7 @@ MASTER_SITES= SF http://etherboot.berlios.de/dist/
MAINTAINER= ambrisko@FreeBSD.org
COMMENT= Network boot of FreeBSD a.out/ELF kernels (improved netboot)
+SSP_UNSAFE= yes
ONLY_FOR_ARCHS= i386
NO_PACKAGE= lots of configuration necessary
diff --git a/net/iet/Makefile b/net/iet/Makefile
index 45294a9c666a..5fb0eaa241a6 100644
--- a/net/iet/Makefile
+++ b/net/iet/Makefile
@@ -4,7 +4,7 @@
PORTNAME= iet
PORTVERSION= 1.4.20.2
PORTREVISION= 6
-CATEGORIES= net
+CATEGORIES= net kld
MASTER_SITES= SF/iscsitarget/iscsitarget/${PORTVERSION}/
DISTNAME= iscsitarget-${PORTVERSION}
@@ -18,6 +18,7 @@ COMMENT= The iSCSI Enterprise Target
LICENSE= GPLv2
+SSP_UNSAFE= kernel module does not support ssp
BUILD_WRKSRC= ${WRKSRC}/freebsd
INSTALL_WRKSRC= ${BUILD_WRKSRC}
diff --git a/net/ng_daphne/Makefile b/net/ng_daphne/Makefile
index ce95f8146506..37a29bf07703 100644
--- a/net/ng_daphne/Makefile
+++ b/net/ng_daphne/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: ng_daphne
-# Date created: 8 November 2003
-# Whom: Gerasimos Dimitriadis
-#
+# Created by: Gerasimos Dimitriadis
# $FreeBSD$
-#
PORTNAME= ng_daphne
PORTVERSION= 1.0
@@ -15,6 +11,8 @@ MASTER_SITES= http://newton.ee.auth.gr/ng_daphne/ \
MAINTAINER= gedimitr@auth.gr
COMMENT= A simple netgraph module for multihop ad hoc networks
+SSP_UNSAFE= kernel module does not support ssp
+
.include <bsd.port.pre.mk>
SYSDIR?= ${SRC_BASE}/sys
diff --git a/net/ng_mikrotik_eoip/Makefile b/net/ng_mikrotik_eoip/Makefile
index b84903e7fd5e..e45121c6a827 100644
--- a/net/ng_mikrotik_eoip/Makefile
+++ b/net/ng_mikrotik_eoip/Makefile
@@ -12,6 +12,8 @@ COMMENT= Netgraph node for Mikrotik EoIP tunneling
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
+
OPTIONS_DEFINE= PTABLE
PTABLE_DESC= Use O(1) lookup for tunnel hooks
# This option enables usage of static pointer table to find needed decimal-named hook,
diff --git a/net/skyfish/Makefile b/net/skyfish/Makefile
index 64b32f0c15bc..a167c7a9e28d 100644
--- a/net/skyfish/Makefile
+++ b/net/skyfish/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: skyfish
-# Date created: 23 May 2008
-# Whom: Nsand <nsand@sura.ru>
-#
+# Created by: Nsand <nsand@sura.ru>
# $FreeBSD$
-#
PORTNAME= skyfish
PORTVERSION= 0.91
@@ -13,6 +9,8 @@ MASTER_SITES= ftp://ftp.lissyara.su/users/nsand/skyfish/
MAINTAINER= nsand@sura.ru
COMMENT= Grabbing TCP streams from network interface (SAT internet)
+SSP_UNSAFE= kernel module does not support ssp
+
.include <bsd.port.pre.mk>
SYSDIR?= ${SRC_BASE}/sys
diff --git a/net/userfw/Makefile b/net/userfw/Makefile
index 6177d3d4a82a..70914984ddc8 100644
--- a/net/userfw/Makefile
+++ b/net/userfw/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: userfw
-# Date created: 10 Mar 2012
-# Whom: Maxim Ignatenko
-#
+# Created by: Maxim Ignatenko
# $FreeBSD$
-#
PORTNAME= userfw
PORTVERSION= 0.1.3
@@ -17,6 +13,7 @@ COMMENT= Modular packet filter
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
USE_XZ= yes
USES= cmake:outsource
USE_LDCONFIG= yes
diff --git a/print/acroreadwrapper/Makefile b/print/acroreadwrapper/Makefile
index 4d7b3661cda4..e2f9b9c05998 100644
--- a/print/acroreadwrapper/Makefile
+++ b/print/acroreadwrapper/Makefile
@@ -1,13 +1,9 @@
-# New ports collection makefile for: acroreadwrapper
-# Date created: 20 February 2006
-# Whom: hrs
-#
+# Created by: hrs
# $FreeBSD$
-#
PORTNAME= acroreadwrapper
PORTVERSION= 0.0.20130208
-CATEGORIES= print
+CATEGORIES= print kld
MASTER_SITES= http://people.allbsd.org/~hrs/FreeBSD/
DISTNAME= linux_adobe_kmod-${PORTVERSION:E}
@@ -18,6 +14,8 @@ LICENSE= BSD
RUN_DEPENDS= ${LOCALBASE}/lib/linux-libgtkembedmoz/libgtkembedmoz.so:${PORTSDIR}/www/linux-libgtkembedmoz
+SSP_UNSAFE= kernel module does not support ssp
+
ONLY_FOR_ARCHS= amd64 i386
PLIST_FILES= bin/acroread8 bin/acroread9 bin/acroread \
${KMODDIR}/linux_adobe.ko
diff --git a/security/quantis-kmod/Makefile b/security/quantis-kmod/Makefile
index 2cb011405202..2d4cac22dd52 100644
--- a/security/quantis-kmod/Makefile
+++ b/security/quantis-kmod/Makefile
@@ -17,6 +17,7 @@ LICENSE= BSD GPLv2
LICENSE_COMB= dual
LICENSE_FILE= ${WRKDIR}/Quantis-${DISTVERSION}/License.txt
+SSP_UNSAFE= kernel module does not support ssp
USE_ZIP= yes
EXTRACT_BEFORE_ARGS= -aqo
diff --git a/sysutils/acpi_call/Makefile b/sysutils/acpi_call/Makefile
index 34dd12f6f762..bf7833388593 100644
--- a/sysutils/acpi_call/Makefile
+++ b/sysutils/acpi_call/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: acpi_call
-# Date created: 15 Oct 2011
-# Whom: Maxim Ignatenko
-#
+# Created by: Maxim Ignatenko
# $FreeBSD$
-#
PORTNAME= acpi_call
PORTVERSION= 1.0.1
@@ -16,6 +12,8 @@ COMMENT= Kernel module for calling ACPI methods from userspace
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
+
.include <bsd.port.pre.mk>
KMODDIR?= /boot/modules
diff --git a/sysutils/biosfont/Makefile b/sysutils/biosfont/Makefile
index 95b131eb6879..ffb5c2073105 100644
--- a/sysutils/biosfont/Makefile
+++ b/sysutils/biosfont/Makefile
@@ -11,6 +11,8 @@ COMMENT= Kernel module to retrieve bitmap fonts from BIOS memory
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
+
# only platforms guraranteed to be ok, feedback/patches are welcome
ONLY_FOR_ARCHS= i386 amd64
diff --git a/sysutils/fusefs-kmod/Makefile b/sysutils/fusefs-kmod/Makefile
index 1416561e7887..b20bcfdde24f 100644
--- a/sysutils/fusefs-kmod/Makefile
+++ b/sysutils/fusefs-kmod/Makefile
@@ -17,6 +17,8 @@ COMMENT= Kernel module for fuse
BUILD_DEPENDS= fusefs-libs>2.4.1:${PORTSDIR}/sysutils/fusefs-libs
+SSP_UNSAFE= kernel module does not support ssp
+
USE_RC_SUBR= fusefs
KMODDIR?= ${PREFIX}/modules
PLIST_SUB= KMODDIR=${KMODDIR}
diff --git a/sysutils/graid5/Makefile b/sysutils/graid5/Makefile
index b912249cdcba..ef0b8b49f33f 100644
--- a/sysutils/graid5/Makefile
+++ b/sysutils/graid5/Makefile
@@ -1,9 +1,5 @@
-# New ports collection makefile for: graid5
-# Date created: 09 Nov 2010
-# Whom: Lev Serebryakov <lev@FreeBSD.org>
-#
+# Created by: Lev Serebryakov <lev@FreeBSD.org>
# $FreeBSD$
-#
PORTNAME= graid5
PORTVERSION= ${MAINVERSION}.${VERSIONDATE}
@@ -14,6 +10,7 @@ MASTER_SITES= http://lev.serebryakov.spb.ru/download/graid5/
MAINTAINER= lev@FreeBSD.org
COMMENT= RAID5 geom class
+SSP_UNSAFE= kernel module does not support ssp
USE_BZIP2= yes
NO_PACKAGE= should be recompiled for a particular FreeBSD kernel
diff --git a/sysutils/grub2/Makefile b/sysutils/grub2/Makefile
index 31acac741ece..5d89c121e8f1 100644
--- a/sysutils/grub2/Makefile
+++ b/sysutils/grub2/Makefile
@@ -17,6 +17,7 @@ BUILD_DEPENDS= ${LOCALBASE}/bin/flex:${PORTSDIR}/textproc/flex \
help2man:${PORTSDIR}/misc/help2man
CONFLICTS= grub-0*
+SSP_UNSAFE= yes
USE_XZ= yes
USE_GCC= yes
USE_AUTOTOOLS= automake aclocal autoconf
diff --git a/sysutils/mono-kmod/Makefile b/sysutils/mono-kmod/Makefile
index 5b777b09cf22..bdd77122c4b3 100644
--- a/sysutils/mono-kmod/Makefile
+++ b/sysutils/mono-kmod/Makefile
@@ -1,9 +1,5 @@
-# Ports collection makefile for: mono-kmod
-# Date created: 14 April 2007
-# Whom: bkoenig@cs.tu-berlin.de
-#
+# Created by: bkoenig@cs.tu-berlin.de
# $FreeBSD$
-#
PORTNAME= mono-kmod
PORTVERSION= 20070416
@@ -15,6 +11,7 @@ COMMENT= Execute .NET applications from command line
ONLY_FOR_ARCHS= i386 amd64 arm
+SSP_UNSAFE= kernel module does not support ssp
USE_BZIP2= yes
KMODDIR?= /boot/modules
SUB_FILES= pkg-message
diff --git a/sysutils/pefs-kmod/Makefile b/sysutils/pefs-kmod/Makefile
index 5d490e020d72..17759e98113b 100644
--- a/sysutils/pefs-kmod/Makefile
+++ b/sysutils/pefs-kmod/Makefile
@@ -1,4 +1,4 @@
-# Created by: Gleb Kurtsou <gleb@freebsd.org>
+# Created by: Gleb Kurtsou <gleb@FreeBSD.org>
# $FreeBSD$
PORTNAME= pefs
@@ -12,6 +12,7 @@ COMMENT= PEFS kernel level stacked cryptographic filesystem
LICENSE= BSD
+SSP_UNSAFE= kernel module does not support ssp
FETCH_ARGS= -Fpr # work around 302 redirect
KMODDIR?= /boot/modules
diff --git a/sysutils/pmap/Makefile b/sysutils/pmap/Makefile
index 313e5ac8265a..026398c9b579 100644
--- a/sysutils/pmap/Makefile
+++ b/sysutils/pmap/Makefile
@@ -11,6 +11,7 @@ MASTER_SITES= ${MASTER_SITE_LOCAL:S!$!skv/!} \
MAINTAINER= ports@FreeBSD.org
COMMENT= Detailed process memory display
+SSP_UNSAFE= kernel module does not support ssp
NO_PACKAGE= Depends on kernel
KMODDIR= /boot/modules
diff --git a/sysutils/scprotect/Makefile b/sysutils/scprotect/Makefile
index f1bf96a4aa73..fa190d4f18bf 100644
--- a/sysutils/scprotect/Makefile
+++ b/sysutils/scprotect/Makefile
@@ -1,9 +1,5 @@
-# New ports collection Makefile for: scprotect
-# Date created: 5 Feb 2009
-# Whom: Denis Barov <dindin@dindin.ru>
-#
+# Created by: Denis Barov <dindin@dindin.ru>
# $FreeBSD$
-#
PORTNAME= scprotect
PORTVERSION= 20091116
@@ -14,6 +10,7 @@ MAINTAINER= ports@FreeBSD.org
COMMENT= Protect process from killing when the swap space is exhausted
NO_PACKAGE= Needs to be compiled for specific kernel
+SSP_UNSAFE= kernel module does not support ssp
KMODDIR?= /boot/modules
diff --git a/sysutils/vordog/Makefile b/sysutils/vordog/Makefile
index 9de3f1e57e51..f5a5b547a335 100644
--- a/sysutils/vordog/Makefile
+++ b/sysutils/vordog/Makefile
@@ -1,9 +1,5 @@
-# Ports collection makefile for: vordog
-# Date created: 8 July 2008
-# Whom: Kueifeng Li <thinker@branda.to>
-#
+# Created by: Kueifeng Li <thinker@branda.to>
# $FreeBSD$
-#
PORTNAME= vordog
PORTVERSION= 20080708
@@ -13,6 +9,7 @@ MASTER_SITES= http://www.assembla.com/spaces/vordog/documents/dcR7vqtqyr3AMlab7j
MAINTAINER= ports@FreeBSD.org
COMMENT= Watchdog(9) driver for watchdog timer of Vortex86
+SSP_UNSAFE= kernel module does not support ssp
KMODDIR= /boot/modules
ONLY_FOR_ARCHS= i386
diff --git a/x11/nvidia-driver/Makefile b/x11/nvidia-driver/Makefile
index 1c373651d25f..e5e98c8200cf 100644
--- a/x11/nvidia-driver/Makefile
+++ b/x11/nvidia-driver/Makefile
@@ -27,6 +27,7 @@ LICENSE_NAME= License For Customer Use of NVIDIA Software
LICENSE_FILE= ${WRKSRC}/doc/license.txt
LICENSE_PERMS= dist-mirror no-dist-sell pkg-mirror no-pkg-sell auto-accept
+SSP_UNSAFE= kernel module does not support ssp
ARCH_SUFX= ${ARCH:S/i386//:S/amd/_/}
USE_XORG= xorg-server
USE_GL= gl