hardened32_2 chroot miranda ~ # gcc -static -fstack-protector-all -fomit-frame-pointer -o ssp_entropy ssp_entropy.c && paxctl -pemsrxv ssp_entropy && gdb --quiet --ex run --ex quit ./ssp_entropy && cat ssp_entropy.c 
PaX control v0.4
Copyright 2004,2005,2006 PaX Team <pageexec@freemail.hu>

- PaX flags: -------x-e-- [ssp_entropy]
        RANDEXEC is disabled
        EMUTRAMP is disabled
Using host libthread_db library "/lib/tls/libthread_db.so.1".
Starting program: /root/ssp_entropy 
__guard@@GLIBC mem: [[0x080bcf30]] value: [[0x6f54ffbf]]
__guard canary mem: [[0xff9ebf00]] value: [[0x6f54ffbf]]

Program exited normally.
#include <stdio.h>

void go(void);
void findguard(void);

extern unsigned long int __guard;

int main(void) {
  printf("__guard@@GLIBC mem: [[0x%0*x]] value: [[0x%0*x]]\n", 8, &__guard, 8, __guard);
  go();
  return(0);
}

void go(void) {
  findguard();
  return;
}

void findguard() {
  int loca = 0xdeadbeef;
  int *g = &loca; g += 0x1;
  printf("__guard canary mem: [[0x%0*x]] value: [[0x%0*x]]\n", 8, g, 8, *g);
  return;
}